topic Re: Upgrading to R81.20 in Azure in Cloud Firewall

Upgrading to R81.20 in Azure

russell_perera — Thu, 16 Nov 2023 12:10:10 GMT

Hi All,

I need to upgrade our R80.40 cluster in Azure to R81.20. In-place upgrades have failed and according to support and sk180769 we need to upgrade by deploying another cluster into the same subnets. I have been following this document below.

https://sc1.checkpoint.com/documents/IaaS/WebAdminGuides/EN/CP_CloudGuard_Network_for_Azure_HA_Cluster/Content/Topics-Azure-HA/Upgrade.htm?tocpath=Upgrade%7C_____0#Upgrading_a_Check_Point_CloudGuard_Network_Security_High_Availability_Solution

The R81.20 cluster deployment fails at the backend-lb.

My existing R80.40 cluster eth1 (inside) network is 10.28.1.32/27. The existing backend-lb is using 10.28.1.36 as the lb IP. The template is trying to assign the same IP to the new backend-lb it is trying to deploy and failing.

Has anyone tried this recently? I followed the same procedure when we went from R80.30 to R80.40 and didn't have this issue.

Thanks

Re: Upgrading to R81.20 in Azure

natanelm — Thu, 16 Nov 2023 12:41:22 GMT

Hi @russell_perera,

We have encountered some issues with Azure's function (Microsoft side) that assigns the first available IP of the subnet in our deployment.

As a workaround, you can use the custom template deployment option and specify a start IP address of your choice (Subnet1Start Address/Subnet2Start Address).

GitHub Link: https://github.com/CheckPointSW/CloudGuardIaaS/tree/master/azure/templates

Direct link for HA custom deployment: https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FCheckPointSW%2FCloudGuardIaaS%2Fmaster%2Fazure%2Ftemplates%2Fmarketplace-ha%2FmainTemplate.json

Thanks,
Natanel

Re: Upgrading to R81.20 in Azure

russell_perera — Thu, 16 Nov 2023 16:09:10 GMT

Thanks @natanelm that worked. I was able to deploy via a custom template.