[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] upgrade to fp3 and IPSO
Hello Nicolas / Albert, Well, this is my first time that i need to do the upgrade of the IOS, and the nokia is in a important customer, so i have done a summary for do this task, please tell me if this steps are correct (The scenario is a box Nokia IP 530 IPSO 3.5 and FP2, the module and management are in the same box): 1.- First upgrade the FW-1 from FP2 to FP3 with the command "newpkg". In the papers that i have been reading don't say anything about the steps that i need follow after of the enter this command, coul you tell me if you remember what are this steps ? I don't know is this menu could install the module and de management ? Do you know it ? 2.- Second i have to enter the command: "newimage -k -l ipso.tgz". Now whe question is when i boot the box it will boot with the OS changed to IPSO 3.6? Is necesary activate the new IPSO 3.6? Do you have some tips to do this work ? The problem is that i never have done any upgrade in boxes NOKIA and i am worried about that. I have to do this work in at least 3 hours so i need your advices before it. Would you mind telling me this advices ? Thanks in advance Andres Zorrilla ----- Original Message ----- From: "Figaro, Nicolas" < To: <[email protected]> Sent: Thursday, August 28, 2003 12:50 AM Subject: Re: [FW-1] upgrade to fp3 and IPSO The image is mounted read only ( try to modify a file in /etc ... ). Ipso systematically install the whole distribution ( in /image/IPSO...). During the boot, the selected IPSO image is mounted and runs. (the /config/active file contains the whole config for your box, you can find the selected ipso image inside). But you can switch back to older version if you want. (I pray microsoft will add this functionnality in the future ... ). Regards Nicolas figaro -----Original Message----- From: Edouard Zorrilla [mailto:[email protected]] Sent: Wednesday, August 27, 2003 5:45 PM To: Mailing list for discussion of Firewall-1 Subject: Re: [FW-1] upgrade to fp3 and IPSO Nicolas, Why did you say that my OS is read-only partition ?. In the step 2 you said install ipso 3.6, but isn't only a upgrade why install ? Thanks in advance Edouard ----- Original Message ----- From: "Figaro, Nicolas" <[email protected]> To: <[email protected]> Sent: Wednesday, August 27, 2003 8:33 AM Subject: Re: [FW-1] upgrade to fp3 and IPSO > new image installation (there is now OS upgrade, your OS > is on a read-only partition :) :) ). > > 1 : backup all machines > 2 : install ipso 3.6 > 3 : upgrade checkpoint on management (there is a wrapper for win32). 4 > : upgrade svn foundation on module (upgrade from svn foundation fp2) 5 > : upgrade firewall-1 on module (upgrade from firewall-1 fp2) > > newimage -i : interactive mode (run newimage -h for the manual). > newimage -k -f path/ipso.tgz : install new image and keep installed > packages, using the ipso in the "path/ipso.tgz". > > you can use voyager or command line (but with the command line you > don't have to refresh your browser ...). > > you can use it too for package upgrade but the syntax is not as easy > as the > newimage > > I don't know if you'll find infos at nokia, perhaps the release notes. > > don't forget to backup all your machines to be sure you can restore in case > of a crash. > > Nicolas Figaro > > -----Original Message----- > From: Andres Zorrilla [mailto:[email protected]] > Sent: mercredi 27 août 2003 15:25 > To: Mailing list for discussion of Firewall-1 > Subject: Re: [FW-1] upgrade to fp3 and IPSO > > > Thanks a lot Nicolas, > > Now I have the image for the IPSO 3.6, so i won't be use the voyager > for the > upgrade of the IPSO ? I saw that in the voyager there is one option > called : > "New Image Installation (Upgrade)" , what about it ? so you encourage > use the update for the ipso by commands ? Now for the upgrade for the > FW-1 is necesary always do first the SVN foundation, next th > Firewall-1 Package and > finally the Management Server, is it ok ? > > Now i read the e-mail of Shawn Duffy and he said me what i need to run > the command "newimage -i", so what is the difference between it and newimage -k > -f path/ipso.tgz ?? > > By the way, anyone have the paper for this Job (Upgrade IPSO from 3.5 > to 3.6 > and at the same time from FP2 to FP3) from the page of Nokia ? > > Thanks for you time > > Best regards > > Andres Zorrilla > > ----- Original Message ----- > From: "Figaro, Nicolas" <[email protected]> > To: <[email protected]> > Sent: Wednesday, August 27, 2003 7:41 AM > Subject: Re: [FW-1] upgrade to fp3 and IPSO > > > Hi, > > for the ipso upgrade, as you can downgrade easily, start with the ipso > upgrade. > > (download the new IPSO image on the module, and run the "newimage -k > -f yourpath/ipso.tgz"; newimage -h for the syntax ..). > > for the fp3, it works like a package upgrade. you can do it through voyager. > > upgrade first the svn foundation, and then the firewall 1 package. > > keep a console to the ip530, as on the first reboot the default filter > is loaded (and the management can't send the rules to the module). > > you have to upgrade your management server to FP3 or you won't be able > to send the rules to your nokia boxes (and you must start with the > management upgrade). > > hope this'll help > > you can find useful docs at http://www.digitalmigrations.com > > regards > > nicolas figaro > > -----Original Message----- > From: Andres Zorrilla [mailto:[email protected]] > Sent: mercredi 27 août 2003 14:09 > To: [email protected] > Subject: [FW-1] upgrade to fp3 and IPSO > > > Does anybody have a step-by-step procedure (with common problems and > tweaks) to upgrade FP2 to FP3 on IPSO. So basically I have to upgrade > the IPSO also simultaneously to 3.6. What I am looking for is the > right way to do it. I mean can I go to 3.6 straight away? Similarly > how about FP2 to FP3. > > Thaks for your Help > > Andres Zorrilla > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|