topic Re: How to replace a VSX RMA ? in Firewall and Security Management

How to replace a VSX RMA ?

Tymdrake — Wed, 25 May 2022 15:38:16 GMT

HI good day, I have a 5800 cluster with 4 VSX firewalls (R81), I need to replace one of members for a new device (RMA) what is the correct procediure for this?

1.- create a snapshot, backup of SMS and two members of VSX cluster
2. Instal the same version on new device
3.- upload and install the snapshot

this is my question, Is neccesary execute VSX_util reconfigure or only apply policies on SMS at the new device ? ??????

I need to reset SIC ????

There are some documentation with a step by step for replacement a VSX device ?

Thaks for your comments.

Re: How to replace a VSX RMA ?

Chris_Atkinson — Wed, 25 May 2022 23:01:45 GMT

Please see sk101515 for guidelines to reconfigure the replacement member.

Re: How to replace a VSX RMA ?

Tymdrake — Tue, 31 May 2022 16:07:05 GMT

Hi Chris

Thanks for the SK, contains all steps to execute was a usefull for replace the RMA device.

Re: How to replace a VSX RMA ?

genisis__ — Sun, 26 Jun 2022 11:19:07 GMT

Chris is there a SK related to renaming a VSX node?

Re: How to replace a VSX RMA ?

Chris_Atkinson — Sun, 26 Jun 2022 11:48:47 GMT

Rename where exactly, Gateway CLI or in SmartConsole?

Most likely you will need to recreate the member.

https://community.checkpoint.com/t5/Security-Gateways/Rename-vsx-cluster-member-name-on-VSX-Cluster-r80-30/td-p/108008

Re: How to replace a VSX RMA ?

genisis__ — Sun, 26 Jun 2022 11:52:32 GMT

It would be to rename the hostname at the GAIA level, and the gateway object in the database.

I had a feeling you might say recreate it 🙂

What about just breaking sic rename and the establishing sic to the node?