cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Ugur_Urel
Ivory

Full HA cluster upgrade from R77.30 to R80.30

Hello,

We have two 5200 appliances running as R77.30 Full HA Cluster. We are planning to upgrade to version R80.30. 

In the Installation and Upgrade documentation (https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_Installation_and_Upgrade_Gu...) Checkpoint says that, first upgrade the primary server then clean install the secondary server. This procedure is for upgrading from R77.30 specifically. If upgrading from R80 and above it seems that secondary management server can be upgraded directly.(https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_Installation_and_Upgrade_Gui...)

Since these appliances are Full HA cluster and have security gateway running, what will happen when we first upgrade primary server and reboot? The secondary server will go active as R77.30 and after primary server rebooted can it become active and co-exists in the cluster together with R77.30? 

Also is there any other procedure to upgrade without clean installing the secondary server?

I will be very pleased if someone can give more detailed procedure about the upgrade.

Thanks in advance.

 

 

 

0 Kudos
6 Replies

Re: Full HA cluster upgrade from R77.30 to R80.30

before you start the upgrade of the primary, you remove the secondary management object in the SmartDashboard. Now when you reboot the primary management will come back while the R77.30 gateway is the active cluster member. When you flip the cluster to the upgraded machine you will loose active connections (most of the time) and should be done in a maintenance window.
After the clean install in the first time wizard you designate the second box as secondary management and gateway, when done reset SIC and you're up and running again.
Regards, Maarten
0 Kudos

Re: Full HA cluster upgrade from R77.30 to R80.30

The best possible suggestion for this upgrade would be the following:

- Split R77.30 Management from Cluster and establish it in a VM

- Upgrade all three units to R80.30

Out of experience, SMS on VM is preferable to any StandAlone or Full Management HA configuration.

0 Kudos
Ugur_Urel
Ivory

Re: Full HA cluster upgrade from R77.30 to R80.30

I think splitting management is not an option because of licensing. I will follow Marteen's recommendation.

Thank you for the replies. Have a great day!

0 Kudos

Re: Full HA cluster upgrade from R77.30 to R80.30

If you can not afford to separate the management you have to live longer with Fool HA 😃. I can only declare my deepest sympathy.

0 Kudos
Ugur_Urel
Ivory

Re: Full HA cluster upgrade from R77.30 to R80.30

Thank you for your good wishes 😀

I have read a lot of comments about running Full HA and R80.X on 5200 appliances have 8 GB Ram and now seriously considering to split management. Hope we can choose this path.

0 Kudos

Re: Full HA cluster upgrade from R77.30 to R80.30

Be aware that when you do go this path you cannot do that from a R80.10-30 system. You need to pursue this before your migration or wait until you are on R80.40.
Regards, Maarten
0 Kudos