topic Re: Replacing 1550 gateways in a cluster using same configuration and settings. in Firewall and Security Management

Replacing 1550 gateways in a cluster using same configuration and settings.

AaronPW — Fri, 28 Jul 2023 15:25:30 GMT

Hi. We have a site with 2 1550 running R80.20.40 in a cluster that we are replacing with some other 1550 running 81.10.07. These current units have been long term problems in terms of reliability that we are being instructed to replace them.

On the replacements I've used the same interface and routing configurations, and have given them the same hostnames. Can I just swap them in for the old units, make sure SIC is established, then push policy? Or would it be better to recreate the cluster?

Any issues with this approach?

Re: Replacing 1550 gateways in a cluster using same configuration and settings.

the_rock — Fri, 28 Jul 2023 18:01:49 GMT

I believe below is what you meant, but I will let someone with more SMB appliances confirm for sure.

Andy

https://community.checkpoint.com/t5/Security-Gateways/Replace-Upgrade-Cluster/td-p/69216

Re: Replacing 1550 gateways in a cluster using same configuration and settings.

the_rock — Fri, 28 Jul 2023 18:12:35 GMT

Also, I would say your method makes sense, if they are locally managed. MAKE SURE you keep the backup/config, in case is needed down the road. Normally, like on Cisco, you can simply copy bits and pieces over and then keep saving, by running save config command.

Cheers,

Andy

Re: Replacing 1550 gateways in a cluster using same configuration and settings.

AaronPW — Fri, 28 Jul 2023 18:14:16 GMT

Cool. That is switching to a different model it looks like but a similar process. All my interfaces and routing are already set on the new unit as well. This is being done off hours so no issues with downtime.

Re: Replacing 1550 gateways in a cluster using same configuration and settings.

the_rock — Fri, 28 Jul 2023 18:15:17 GMT

K, so thats perfect then, sounds like you got a hang of it mate : - )

Andy

Re: Replacing 1550 gateways in a cluster using same configuration and settings.

AaronPW — Fri, 28 Jul 2023 19:09:58 GMT

These are centrally managed. We have a central SmartConsole/Update server managing all of our gateways. Unless I'm misunderstanding you.

Re: Replacing 1550 gateways in a cluster using same configuration and settings.

the_rock — Fri, 28 Jul 2023 19:11:19 GMT

Perfect, then follow the first link I sent, it would be applicable.

Andy