upgrading to HFA03 with test and how to downgrade to R60.

Hello,
-Is there a simple way to proceed some kind of clean
"roll-back" from
(for example) secureplatform R60 HFA3 to R60.

rpm -e CPsuite-R60-00 ? does it remove only HFA03?



-During an upgrade to HFA03 on a R60 secureplatform, I would
like to
check first, on the upgraded node, that applications going
through the
FW are running correctly, before to upgrade the second node
of the
cluster XL.

I thought to proceed that way :
1 Upgrade the slave (node B).
2 Reboot the slave

3 Proceed with cphastop on the Node A (primary still not
upgraded)
=> the active node is now Node B.

Check the applications 

4 And upgrade node A.

Do you have a better way to do this ?
The question behind that is also, Is it a problem to have
two nodes with
different HFA version in the same cluster ?


Thank you for your help.

 

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

At 12:10 12.03.2007, you wrote:
>Hello,
>-Is there a simple way to proceed some kind of clean
"roll-back" from
>(for example) secureplatform R60 HFA3 to R60.
>
>rpm -e CPsuite-R60-00 ? does it remove only HFA03?

no.

after the installation of any HFA it also creates an
uninstall-script 
for the HFA in $FWDIR.

>-During an upgrade to HFA03 on a R60 secureplatform, I
would like to
>check first, on the upgraded node, that applications
going through the
>FW are running correctly, before to upgrade the second
node of the
>cluster XL.
>
>I thought to proceed that way :
>1 Upgrade the slave (node B).
>2 Reboot the slave
>
>3 Proceed with cphastop on the Node A (primary still not
upgraded)
>=> the active node is now Node B.
>
>Check the applications
>
>4 And upgrade node A.
>
>Do you have a better way to do this ?
>The question behind that is also, Is it a problem to
have two nodes with
>different HFA version in the same cluster ?

check the release-notes for details about upgrading. you can
have 2 
R60 nodes with different HFA-version in a cluster - this is
supported 
for an upgrade - without loosing connections.

br
reinhard


>Thank you for your help.
>
>
>
>=================================================
>To set vacation, Out-Of-Office, or away messages,
>send an email to LISTSERVamadeus.us.checkpoint.com
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http:
//www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your
>subscription options, email
>fw-1-ownerts.checkpoint.com
>=================================================

-- 
Reinhard Stich          r.stichinternet-security.at
Internet Security AG,      1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Hi,

1. Upgrade Node B, Reboot

2. Instead of cpstop, use  "cphaprob -d failDevice -s
problem register" on
Node A, to make Node B the active cluster memeber.

3. Perform Tests, if successful

4. upgrade Node A

4. "cphaprob -d failDevice unregister" on Node A.
Depending on option
selected in Cluster object's, clusterxl tab, "maintain
current active
gateway", or "switch to higher priority
gateway", Node B will stay active or
Node A will become active.  If you have the first option
selected, and want
Node A to be the active gateway again, perform the
register/unregister on
Node B.



Christopher McGill



On 3/12/07, Reinhard Stich <r.stichinternet-security.at>
wrote:
>
> At 12:10 12.03.2007, you wrote:
> >Hello,
> >-Is there a simple way to proceed some kind of
clean "roll-back" from
> >(for example) secureplatform R60 HFA3 to R60.
> >
> >rpm -e CPsuite-R60-00 ? does it remove only HFA03?
>
> no.
>
> after the installation of any HFA it also creates an
uninstall-script
> for the HFA in $FWDIR.
>
> >-During an upgrade to HFA03 on a R60
secureplatform, I would like to
> >check first, on the upgraded node, that
applications going through the
> >FW are running correctly, before to upgrade the
second node of the
> >cluster XL.
> >
> >I thought to proceed that way :
> >1 Upgrade the slave (node B).
> >2 Reboot the slave
> >
> >3 Proceed with cphastop on the Node A (primary
still not upgraded)
> >=> the active node is now Node B.
> >
> >Check the applications
> >
> >4 And upgrade node A.
> >
> >Do you have a better way to do this ?
> >The question behind that is also, Is it a problem
to have two nodes with
> >different HFA version in the same cluster ?
>
> check the release-notes for details about upgrading.
you can have 2
> R60 nodes with different HFA-version in a cluster -
this is supported
> for an upgrade - without loosing connections.
>
> br
> reinhard
>
>
> >Thank you for your help.
> >
> >
> >
> >=================================================
> >To set vacation, Out-Of-Office, or away messages,
> >send an email to LISTSERVamadeus.us.checkpoint.com
> >in the BODY of the email add:
> >set fw-1-mailinglist nomail
> >=================================================
> >To unsubscribe from this mailing list,
> >please see the instructions at
> >http:
//www.checkpoint.com/services/mailing.html
> >=================================================
> >If you have any questions on how to change your
> >subscription options, email
> >fw-1-ownerts.checkpoint.com
> >=================================================
>
> --
> Reinhard Stich          r.stichinternet-security.at
> Internet Security AG,      1150 Wien, Johnstrasse 29
> Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================