Replacing 1550 gateways in a cluster using same configuration and settings.

[AaronPW]

Hi. We have a site with 2 1550 running R80.20.40 in a cluster that we are replacing with some other 1550 running 81.10.07.  These current units have been long term problems in terms of reliability that we are being instructed to replace them. 

On the replacements I've used the same interface and routing configurations, and have given them the same hostnames.  Can I just swap them in for the old units, make sure SIC is established, then push policy?  Or would it be better to recreate the cluster?

Any issues with this approach?

[the_rock]

I believe below is what you meant, but I will let someone with more SMB appliances confirm for sure.

Andy

https://community.checkpoint.com/t5/Security-Gateways/Replace-Upgrade-Cluster/td-p/69216

[AaronPW]

Cool.  That is switching to a different model it looks like but a similar process.  All my interfaces and routing are already set on the new unit as well.  This is being done off hours so no issues with downtime.   

[the_rock]

K, so thats perfect then, sounds like you got a hang of it mate : - )

Andy

[the_rock]

Also, I would say your method makes sense, if they are locally managed. MAKE SURE you keep the backup/config, in case is needed down the road. Normally, like on Cisco, you can simply copy bits and pieces over and then keep saving, by running save config command.

Cheers,

Andy

[AaronPW]

These are centrally managed.  We have a central SmartConsole/Update server managing all of our gateways.   Unless I'm misunderstanding you. 

[the_rock]

Perfect, then follow the first link I sent, it would be applicable.

Andy