[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] IPSO 3.6 -> 3.7 UPgrade with NG FP3
hi,
this works fine,
downtime shoulb be nearly 0 - follow these steps:
1. upgrade the backup-box (ipso)
- be sure to have fw1 activated after the reboot into ipso3.7
- after fw-backup is up again - install policy to see if this works
- all connections still use the master-fw
2. disable one interface on the master-fw
- so the master will become backup and backup will become active
- look if everythink is fine
- if everything works
3. upgrade the master
- be sure to have fw1 activated after the reboot into ipso3.7
- after fw-master (this time its in backup-mode) is up again
- install policy to see if this works
4. anable the one interface that your master-firewall becomes master again
5. go home :-)
cheers
reinhard
At 09:58 19.09.2003 +0200, you wrote:
Hi gurus
Any good step-by-step documentation available for the following scenario?
2 IP 530 with IPSO 3.6.Rel 10. 6 physical networks connected, 1 additional
for state sync.
VRRP in Failover Mode configured. NG FP3 with HFA 318 installed on both
nodes.
Static and Hide NAT on external IF, both manually and automatically
configured.
Cluster is acting as VPN Endpoint for Site2Site VPN.
Now we want to upgrade first to IPSO 3.7 and some day later to NG AI.
Nodes should work in VRRP HA mode, no LB, after IPSO Upgrade.
I searched Nokia and found some docs that confuse me a little.
What to look for, what problems to expect? What downtime to expect?
Any help would be great.
Thanks
Karl
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
--
!! NEUE SNAIL-MAIL-ADRESSE !!
Reinhard Stich, ASSIST [email protected]
Internet Security AG, 1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-10
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
