Firewall-1

Re: [FW-1] How to do a NGX Full Connectivity Upgrade on IPSO VRRP-Cluste

Subject: Re: [FW-1] How to do a NGX Full Connectivity Upgrade on IPSO VRRP-Cluster
From: Jerry Eblin <Jerry.Eblin AT RRSC DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Wed, 19 Apr 2006 11:09:35 -0400
Achim,

      Same issues here as well. Following the instructions step by step and
the cluster went down for roughly 3-4 minutes when it shouldn't have.
Needless to say we were not happy with this. Just wanted to let you know
you are not alone with this issue.

Jerry



                                                                           
             Joachim Altenhein                                             
             <Joachim.Altenhei                                             
             n AT MIKADO DOT DE>                                               
To 
             Sent by: Mailing          FW-1-MAILINGLIST AT AMADEUS.US DOT 
CHECKPO 
             list for                  INT.COM                             
             discussion of                                              cc 
             Firewall-1                                                    
             <FW-1-MAILINGLIST                                     Subject 
             @AMADEUS.US.CHECK         [FW-1] How to do a NGX Full         
             POINT.COM>                Connectivity Upgrade on IPSO        
                                       VRRP-Cluster                        
                                                                           
             04/19/2006 10:27                                              
             AM                                                            
                                                                           
                                                                           
             Please respond to                                             
             Mailing list for                                              
               discussion of                                               
                Firewall-1                                                 
             <FW-1-MAILINGLIST                                             
             @AMADEUS.US.CHECK                                             
                POINT.COM>                                                 
                                                                           
                                                                           




Hello,

has anyone successfully installed a NGX-HFA on a Nokia IPSO
VRRP-Cluster with full connectivity?

I tried to do a fcu for the update from R60 to R60 HFA_02 using the
following sequence of commands:

1.) Installed HFA_02 on the backup system and rebooted the system:
State-sync was "ready"
2.) On the backup system i issued a fw fcu <primary IP>
     It reported a successful full-sync and the active Clusternode
stopped processing traffic (ups!).
3.) I changed the VRRP-priority so that the backup system got the
higher priority, still no traffic was processed.
4.) I installed the HFA_02 (which issues a cpstop) on the other node,
still no traffic
5.) The cluster started to work again after the reboot of the second
cluster node.

So the cluster was down for several minutes which should not happen
again.

Regards,

  Achim

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>