https://community.checkpoint.com/t5/Firewall-and-Security-Management/Hardware-Check-Point-21400-in-cluster-R-80-20-replacement-with/m-p/153416#M25738 <P>Dear Checkmates,</P><P>I am currently planning a HW swap from CP 21400 to CP 7000.<BR />The old cluster (21400) is still active and the replacement is planned in the maintenance window, where it is desirable to have no downtime.</P><P>I planned to perform the replacement using the following steps:</P><P>1. Configure the new 7000 backup node (interfaces and routes) the same as 21400 backup (not active node)<BR />2. Turn off 21400 and start a new backup node 7000. (change version in SmartConsole, establish a SIC, install the policy on new node, etc). As a note&gt; I'm using MDS which is running on version R81.10 so, there,&nbsp; I am compatible with the new GW version)<BR />3. Force a failover from the old 21400 Primary to the new 7000 backup so that it can take over the traffic and then do the swap without downtime.<BR />4. Repeat the above with the old 21400 primary and the new 7000 primary.</P><P>It's theoretically easy, but now the questions follow, so I'm asking for your experiences/recommendations.</P><P>GWs 21400 and 7000 have completely different interfaces, as well as versions (R80.20 vs. R81.10)</P><P>Will the new 7000 backup node manage to form a cluster with the old 21400 primary (taking into account different OS versions as well as interfaces), so that I would be able to do Cluster failover to the new 7000 backup.</P><P>I am asking for your recommendations so that I can perform this without downtime, as it is a FW cluster that needs 0-24 to be UP.</P><P>Thanks in andvance!</P> Tue, 19 Jul 2022 15:44:25 GMT ld3d 2022-07-19T15:44:25Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Hardware-Check-Point-21400-in-cluster-R-80-20-replacement-with/m-p/153416#M25738 <P>Dear Checkmates,</P><P>I am currently planning a HW swap from CP 21400 to CP 7000.<BR />The old cluster (21400) is still active and the replacement is planned in the maintenance window, where it is desirable to have no downtime.</P><P>I planned to perform the replacement using the following steps:</P><P>1. Configure the new 7000 backup node (interfaces and routes) the same as 21400 backup (not active node)<BR />2. Turn off 21400 and start a new backup node 7000. (change version in SmartConsole, establish a SIC, install the policy on new node, etc). As a note&gt; I'm using MDS which is running on version R81.10 so, there,&nbsp; I am compatible with the new GW version)<BR />3. Force a failover from the old 21400 Primary to the new 7000 backup so that it can take over the traffic and then do the swap without downtime.<BR />4. Repeat the above with the old 21400 primary and the new 7000 primary.</P><P>It's theoretically easy, but now the questions follow, so I'm asking for your experiences/recommendations.</P><P>GWs 21400 and 7000 have completely different interfaces, as well as versions (R80.20 vs. R81.10)</P><P>Will the new 7000 backup node manage to form a cluster with the old 21400 primary (taking into account different OS versions as well as interfaces), so that I would be able to do Cluster failover to the new 7000 backup.</P><P>I am asking for your recommendations so that I can perform this without downtime, as it is a FW cluster that needs 0-24 to be UP.</P><P>Thanks in andvance!</P> Tue, 19 Jul 2022 15:44:25 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Hardware-Check-Point-21400-in-cluster-R-80-20-replacement-with/m-p/153416#M25738 ld3d 2022-07-19T15:44:25Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Hardware-Check-Point-21400-in-cluster-R-80-20-replacement-with/m-p/153431#M25743 <P>Did this with customer over the weekend, worked like a charm, if you follow it, I guarantee you wont have any issues.</P> <P><A href="https://community.checkpoint.com/t5/Security-Gateways/Replace-Upgrade-Cluster/td-p/69216" target="_blank">Solved: Replace/Upgrade Cluster - Check Point CheckMates</A></P> Tue, 19 Jul 2022 18:34:08 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Hardware-Check-Point-21400-in-cluster-R-80-20-replacement-with/m-p/153431#M25743 the_rock 2022-07-19T18:34:08Z