Hi,
1. Upgrade Node B, Reboot
2. Instead of cpstop, use "cphaprob -d failDevice -s problem register" on
Node A, to make Node B the active cluster memeber.
3. Perform Tests, if successful
4. upgrade Node A
4. "cphaprob -d failDevice unregister" on Node A. Depending on option
selected in Cluster object's, clusterxl tab, "maintain current active
gateway", or "switch to higher priority gateway", Node B will stay active or
Node A will become active. If you have the first option selected, and want
Node A to be the active gateway again, perform the register/unregister on
Node B.
Christopher McGill
On 3/12/07, Reinhard Stich <r.stich AT internet-security DOT at> wrote:
At 12:10 12.03.2007, you wrote:
>Hello,
>-Is there a simple way to proceed some kind of clean "roll-back" from
>(for example) secureplatform R60 HFA3 to R60.
>
>rpm -e CPsuite-R60-00 ? does it remove only HFA03?
no.
after the installation of any HFA it also creates an uninstall-script
for the HFA in $FWDIR.
>-During an upgrade to HFA03 on a R60 secureplatform, I would like to
>check first, on the upgraded node, that applications going through the
>FW are running correctly, before to upgrade the second node of the
>cluster XL.
>
>I thought to proceed that way :
>1 Upgrade the slave (node B).
>2 Reboot the slave
>
>3 Proceed with cphastop on the Node A (primary still not upgraded)
>=> the active node is now Node B.
>
>Check the applications
>
>4 And upgrade node A.
>
>Do you have a better way to do this ?
>The question behind that is also, Is it a problem to have two nodes with
>different HFA version in the same cluster ?
check the release-notes for details about upgrading. you can have 2
R60 nodes with different HFA-version in a cluster - this is supported
for an upgrade - without loosing connections.
br
reinhard
>Thank you for your help.
>
>
>
>=================================================
>To set vacation, Out-Of-Office, or away messages,
>send an email to LISTSERV AT amadeus.us.checkpoint DOT com
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http://www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your
>subscription options, email
>fw-1-owner AT ts.checkpoint DOT com
>=================================================
--
Reinhard Stich r.stich AT internet-security DOT at
Internet Security AG, 1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
