i prepare the upgrade
Bond interfaces that are not connected to any Virtual System, should be deleted from the topology before the upgrade procedure.
"Make sure that all SGMs and SSMs are up to date and that the system is configured correctly.
# asg diag verify"
"Copy the HFA Upgrade package to the SMO.
Check_Point_R76SP_50_upgrade.linux.tgz"
"Create a temporary directory on the SMO in:
/home/admin/ # mkdir -v /home/admin/temp"
"If a temporary directory already exists, delete it first with this command:
# g_all rm -rf /home/admin/temp"
"Extract the HFA Upgrade package to the temporary directory.
# tar -xvzf /home/admin/Check_Point_R76SP_50_upgrade.linux.tgz -C /home/admin/temp/"
Best Practice - Connect over a console to the SMO and run the next steps through the console connection.
"Run the pre-installation script.
# cd /home/admin/temp/
# ./AsgInstallScript pre_install"
Upgrade Chassis B.
"Note - Make sure to run the script from Chassis A and not Chassis B.
# cd /home/admin/temp/
# ./AsgInstallScript –b chassis<Chassis_B_ID>"
Confirm that the HFA Upgrade installation procedure completed successfully. A summary message shows when the upgrade is complete.
Preparing for Failover
"Set Chassis B to administratively UP state.
> asg chassis_admin -c <Chassis_B_ID> up"
"Run diagnostics.
# asg policy verify –a [-vs all]
# asg_route -a [--vs all]"
"Make sure that Chassis B is UP and enforces security.
Important - You must correct all errors shown by the diagnostics before you continue to the next step.
> asg stat -v
Failing Over to Chassis B"
"Set Chassis A to administratively DOWN state.
> asg chassis_admin -c <Chassis_A_ID> down"
"Make sure that all SGMs are UP, and that traffic flows normally on Chassis B.
Important - Make sure Chassis B works correctly before you upgrade Chassis A.
> asg monitor [-vs all]
> asg perf [-vs all] -v"
Preparing to Upgrade Chassis A
"Copy the HFA Upgrade package to the SMO.
Check_Point_R76SP_50_upgrade.linux.tgz"
"Create a temporary directory on the SMO in:
/home/admin/
# mkdir -v /home/admin/temp"
"If a temporary directory already exists, delete it first with this command:
# g_all rm -rf /home/admin/temp"
"Extract the HFA Upgrade package to the temporary directory.
# tar -xvzf /home/admin/Check_Point_R76SP_50_upgrade.linux.tgz -C /home/admin/temp/"
"Best Practice - Connect over a console to the SMO and run the next steps through the console connection.
Upgrading Chassis A"
"Make sure that Chassis A is in administratively DOWN state.
> asg monitor -all"
"Upgrade Chassis A.
Note - Make sure to run the script from Chassis B and not Chassis A.
# cd /home/admin/temp/
# ./AsgInstallScript -b chassis<Chassis_A_ID>"
Confirm that the HFA Upgrade installation procedure completed successfully. A summary message shows when the upgrade is complete.
Reboot the SGMs when prompted. Wait until all SGMs are UP.
Preparing for Failover
"Set Chassis A to administratively UP state.
> asg chassis_admin -c <Chassis_A_ID> up"
"Run diagnostics.
# asg policy verify –v [-vs all]
# asg_route"
"Make sure that Chassis A is UP and enforces security.
Important - You must correct all errors shown by the diagnostics before you continue to the next step.
> asg stat -v"
Completing the Upgrade
"Run the finalize step.
Note - This is a mandatory step.
# ./AsgInstallScript finalize"
i want to know if there is an issue how can i do rollback ??
