https://community.checkpoint.com/t5/General-Topics/cphacu-start-no-dr-query-R80-20-upgrade-from-R77-30-VRRP-cluster/m-p/61473#M12453 Hi Guys I'm planning upgrade of 2x5600 gateways in VRRP cluster, as per 'Connectivity Upgrade of a VRRP Cluster' section of 'CP_Cluster_ConnectivityUpgrade_BestPractices.pdf' Currently: - VRRP master = node1 VRRP backup = node2 cphaprob state = Active/Active According to above guidelines, having upgraded node2 to R80.20 & installed Jumbo Hotfix Take #87, I need to sync the connection tables before VRRP failover, to ensure node2 is processing traffic when it becomes VRRP Master - 'cphacu start no_dr' on node2 Q - as both nodes 'cphaprob state' = Active/Active, am I right to assume the tables are already sync'd and therefore 'cphacu start no_dr' step is not required? Is it simply a case of checking the connections on node2 via 'cpview' Many thanks in advance Gary Thu, 29 Aug 2019 11:42:11 GMT heavysoul 2019-08-29T11:42:11Z https://community.checkpoint.com/t5/General-Topics/cphacu-start-no-dr-query-R80-20-upgrade-from-R77-30-VRRP-cluster/m-p/61473#M12453 Hi Guys I'm planning upgrade of 2x5600 gateways in VRRP cluster, as per 'Connectivity Upgrade of a VRRP Cluster' section of 'CP_Cluster_ConnectivityUpgrade_BestPractices.pdf' Currently: - VRRP master = node1 VRRP backup = node2 cphaprob state = Active/Active According to above guidelines, having upgraded node2 to R80.20 & installed Jumbo Hotfix Take #87, I need to sync the connection tables before VRRP failover, to ensure node2 is processing traffic when it becomes VRRP Master - 'cphacu start no_dr' on node2 Q - as both nodes 'cphaprob state' = Active/Active, am I right to assume the tables are already sync'd and therefore 'cphacu start no_dr' step is not required? Is it simply a case of checking the connections on node2 via 'cpview' Many thanks in advance Gary Thu, 29 Aug 2019 11:42:11 GMT https://community.checkpoint.com/t5/General-Topics/cphacu-start-no-dr-query-R80-20-upgrade-from-R77-30-VRRP-cluster/m-p/61473#M12453 heavysoul 2019-08-29T11:42:11Z https://community.checkpoint.com/t5/General-Topics/cphacu-start-no-dr-query-R80-20-upgrade-from-R77-30-VRRP-cluster/m-p/61481#M12457 The way it sounds, it indeed already has synchronization running and you should be able to switch, without loosing connections. Thu, 29 Aug 2019 12:35:31 GMT https://community.checkpoint.com/t5/General-Topics/cphacu-start-no-dr-query-R80-20-upgrade-from-R77-30-VRRP-cluster/m-p/61481#M12457 Maarten_Sjouw 2019-08-29T12:35:31Z https://community.checkpoint.com/t5/General-Topics/cphacu-start-no-dr-query-R80-20-upgrade-from-R77-30-VRRP-cluster/m-p/61485#M12460 thanks Maarten Thu, 29 Aug 2019 12:55:39 GMT https://community.checkpoint.com/t5/General-Topics/cphacu-start-no-dr-query-R80-20-upgrade-from-R77-30-VRRP-cluster/m-p/61485#M12460 heavysoul 2019-08-29T12:55:39Z