topic Re: How to update a cluster from r81.10 to r81.20 in Firewall and Security Management

How to update a cluster from r81.10 to r81.20

SecdetKrypton — Fri, 21 Mar 2025 19:56:44 GMT

Hi team

Could you share with me your recommendations and any knowledge document (SK) for updating the cluster from r81.10 to r81.20?

Re: How to update a cluster from r81.10 to r81.20

JaAnd — Fri, 21 Mar 2025 21:41:52 GMT

Hi,

everything you need is mentioned here:

https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_Installation_and_Upgrade_Guide/Content/Topics-IUG/Upgrading-ClusterXL-VSX-Cluster-VRRP-Cluster.htm

I've heard very positive opinions about CDT - if I managed a considerable amount of ClusterXLs I would probably use it. For now I normally use CPUSE and then MVC, to make upgraded member active, thus verifying new version operability and after positive results, CPUSE again on the second member to upgrade it.

Re: How to update a cluster from r81.10 to r81.20

the_rock — Sat, 22 Mar 2025 12:20:49 GMT

MVC process is described below, its essentially zero downtime. Yes, as @JaAnd said, you can use CDT from smart console, since its minor upgrade, I had done it before and no issues, just verify upgrade first and since its cluster, ensure you select option to update BOTH members (it would do backup first and then master and you can fail back later with clusterXL_admin down; clusterXL_admin up command if needed).

Andy

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Installation_and_Upgrade_Guide/Topics-IUG/MVC-Upgrade-of-ClusterXL-GW-mode.htm?tocpath=Upgrade%20of%20Security%20Gateways%20and%20Clusters%7CUpgrading%20ClusterXL%252C%20VSX%20Cluster%252C%20or%20VRRP%20Cluster%7CMulti-Version%20Cluster%20(MVC)%20Upgrade%7C_____4

Re: How to update a cluster from r81.10 to r81.20

the_rock — Sat, 22 Mar 2025 12:23:25 GMT

You can also follow steps I usually do in my lab for the upgrade, they work too 🙂

Andy

-run cphaprob state to verify which member is backup

-log into backup member's web ui, go to actions and status, confirm recommended version jumbo for R81.20 (though due to RA issue with 98, you might be better of to stick with 92 or install latest 99)

-verify install is allowed

-install and reboot

-follow same process on current master, which will fail over to other member once rebvooted

-if you need to fail back, rin clusterXL_admin down; clusterXL_admin up on current master (original standby)

Good luck!

Andy