VSX - Blink Upgrades & Jumbo HFA Compatibility (sk164258)

[StackCap43382]

Hi All,

I need to upgrade a R81.10 VSX cluster to R81.20 or R82 (Still being decided).

With Normal HA Gateways I've historically BLINK'ed one member to the latest version and recommended hotfix and then done the other one.

However as this is VSX I'm concerned about: https://support.checkpoint.com/results/sk/sk164258

For instance in the SK Matrix R81.10 Take 183 aligns with R81.20 JHF Take 122 or R82 JHF Take 60.

My confusion is JHFs are accumulative as long as B > A it should be fine?

Surly as long as we are upgrading to a newer hotfix then what was on the original installation we should be good?

Or do we need to upgrade to an aligned JHF and then patch after?

Thanks.

EDIT!!!

- Discussion has turned to the best method for the upgrade; In-Place Vs Rebuild.

- SE has said In-Place is perfectly acceptable. 

[Vincent_Bacher]

Hi,

dunno what CP recommends but in our organisation on vsx devices we usually recommend clean install, jumbo, if required private hf and then vsx reconfigure.

[Bob_Zimmerman]

Concurring, a totally clean reinstall is our preferred way of upgrading VSX clusters.

My team can't always get somebody into the datacenter for upgrades, and the ISO is big enough reinstallation over LOM takes several hours per member, so we often have to upgrade in-place. We've never had luck with Blink for upgrades. We typically try to upgrade to the major-version-with-no-jumbo package via CDT in SmartConsole (runs 'vsx_util upgrade', upgrades one member, fails over, upgrades the other member). If that doesn't work, we do the upgrade manually.

We do all jumbos via CDT except when building a new (or cleanly-rebuilt) member.

[Vincent_Bacher]

I understand your point of view.

btw: CDT is a very useful tool.

[Alex-]

Blink will install the new OS and latest Recommended JHF so I don't think it depends that much of the current version.

It's of course important that your CPUSE is up to date.

We did a few VSX clusters with Blink and no issues to report.

[Vincent_Bacher]

"Yes, from a technical perspective it should work fine.

Just a note: If a new file system is introduced, I would prefer a clean install anyway.

[the_rock]

I second what Vince had said. Im no VSX expert by any means, but his process sounds familiar, thats what I always see people do.

[Vincent_Bacher]

Yes. The point is that one works and one is considered as better.

[the_rock]

100%. Have a great weekend, Vince!

[Vincent_Bacher]

That doesn't mean you always do the best thing; you weigh up what to do depending on the situation.
Have a nice weekend too!