topic Re: How to safely reuse an existing cluster in General Topics

How to safely reuse an existing cluster

RemoteUser — Wed, 24 Sep 2025 11:49:40 GMT

Hi everyone,
we currently have two cluster > Cluster-A and Cluster-B > both in HA. R81.20
The plan is to rebuild Cluster-A and then configure it so that it becomes the new Cluster-B. This mean that the configuration present in the Cluster-B it'll be moved in Cluster-A.
By doing this, we will be able to decommission the current Cluster-B.

Since both clusters (Cluster-A and Cluster-B) already exist in the management, I’d like to know, who can i do that? And if there's something to keep in mind.

Cluster-A --------> becomes --------> Cluster-B (new)
Cluster-B --------> decommission

Thanks in advance for your suggestions
Hope it's clear

Re: How to safely reuse an existing cluster

G_W_Albrecht — Wed, 24 Sep 2025 12:01:02 GMT

Why do you have to rebuild cluster-A ?

- You first change the config to the one needed for the role as cluster-B

- you change policy install targets and rules if needed to use Cluster-A instead of Cluster-B

- you remove Cluster-B from all other configurations and delete it

This will not need SIC reset.

Re: How to safely reuse an existing cluster

the_rock — Thu, 25 Sep 2025 01:39:11 GMT

Hey bro,

This link may help.

https://community.checkpoint.com/t5/Security-Gateways/Replace-Upgrade-Cluster/td-p/69216

Now, if config from cluster B needs to be moved over to cluster A, the only logical way I see is to copy show configuration, BUT, then you would need to take cluster A members offline, as there would be an IP conflict. Otherwise, process I referenced would work.

Andy

Re: How to safely reuse an existing cluster

emmap — Thu, 25 Sep 2025 02:26:57 GMT

Remove cluster A from mgmt, fresh install the gateways to the desired version (could be a good time to move to R82), do a normal hardware replacement procedure on cluster B?