Multi-Version Cluster Upgrade Procedure - Gateway Mode (2024)

On the Cluster Member M3, upgrade to R81 with CPUSE, or perform a Clean Install of R81

Multi-Version Cluster Upgrade Procedure - Gateway Mode (2)

Important - You must reboot the Cluster Member after the upgrade or clean install.

Installation Method

Instructions

Upgrade to R81 with CPUSE Check Point Upgrade Service Engine for Gaia Operating System. With CPUSE, you can automatically update Check Point products for the Gaia OS, and the Gaia OS itself.

See Installing Software Packages on Gaia.

Follow the applicable action plan for the local or central installation.

In local installation, select the R81 package and perform Upgrade. See sk92449 for detailed steps.

Clean Install of R81 with CPUSE

See Installing Software Packages on Gaia.

Follow the applicable action plan for the local or central installation.

In local installation, select the R81 package and perform Clean Install. See sk92449 for detailed steps.

Multi-Version Cluster Upgrade Procedure - Gateway Mode (4)

Important - In the Gaia First Time Configuration Wizard, for the Management Connection IP address, you must use the same IP address as was used by the previous Cluster Member (prior to the upgrade).

Clean Install of R81 from scratch

Installing a Cluster Member

Follow Installing a ClusterXL Cluster - only the step "Install the Cluster Members".

Multi-Version Cluster Upgrade Procedure - Gateway Mode (5)

Important - In the Gaia First Time Configuration Wizard, for the Management Connection IP address, you must use the same IP address as was used by the previous Cluster Member (prior to the upgrade).

Installing a VRRP Cluster Member

Follow Installing a VRRP Cluster - only the step "Install the VRRP Cluster Members".

Multi-Version Cluster Upgrade Procedure - Gateway Mode (6)

Important - In the Gaia First Time Configuration Wizard, for the Management Connection IP address, you must use the same IP address as was used by the previous VRRP Cluster Member (prior to the upgrade).

In SmartConsole, establish SIC with the Cluster Member M3

Multi-Version Cluster Upgrade Procedure - Gateway Mode (8)

Important - This step is required only if you performed a Clean Install of R81 on this Cluster Member.

Step

Instructions

1

Connect with SmartConsole to the R81 Security Management Server or Main Domain Management Server that manages this Cluster.

2

From the left navigation panel, click Gateways & Servers.

3

Open the cluster object.

4

From the left tree, click Cluster Members.

5

Select the object of this Cluster Member.

6

Click Edit.

7

On the General tab, click the Communication button.

8

Click Reset.

9

In the One-time password field, enter the same Activation Key you entered during the First Time Configuration Wizard of the Cluster Member.

10

In the Confirm one-time password field, enter the same Activation Key again.

11

Click Initialize.

12

The Trust state field must show Trust established.

13

Click Close to close the Communication window.

14

Click OK to close the Cluster Member Properties window.

15

Click OK to close the Gateway Cluster Properties window.

16

Publish the SmartConsole session.

In SmartConsole, install the Access Control Policy on the R81 Cluster Member M3

Multi-Version Cluster Upgrade Procedure - Gateway Mode (10)

Important - This step is required only if you performed a Clean Install of R81 on the Cluster Member M3.

Step

Instructions

1

Click Install Policy.

2

In the Install Policy window:

  1. In the Policy field, select the applicable Access Control Policy.

  2. In the Install Mode section, select these two options:

    • Select Install on each selected gateway independently.

    • Clear For gateway clusters, if installation on a cluster member fails, do not install on that cluster.

  3. Click Install.

3

The Access Control Policy installation:

  • Succeeds on the upgraded Cluster Member M3.

  • Fails on the old Cluster Members M1 and M2 with a warning. Ignore this warning.

On the R81 Cluster Member M3, enable the MVC mechanism

Step

Instructions

1

Connect to the command line on the Cluster Member.

2

Enable the MVC Mechanism:

  • In Gaia Clish The name of the default command line shell in Check Point Gaia operating system. This is a restricted shell (role-based administration controls the number of commands available in the shell).:

    set cluster member mvc on

  • In the Expert mode:

    cphaconf mvc on

3

Examine the state of the MVC Mechanism:

  • In Gaia Clish:

    show cluster members mvc

  • In the Expert mode:

    cphaprob mvc

In SmartConsole, install the Access Control Policy on the R81 Cluster Member M3

Step

Instructions

1

Click Install Policy.

2

In the Install Policy window:

  1. In the Policy field, select the applicable Access Control Policy.

  2. In the Install Mode section, select these two options:

    • Select Install on each selected gateway independently.

    • Clear For gateway clusters, if installation on a cluster member fails, do not install on that cluster.

  3. Click Install.

3

The Access Control Policy installation:

  • Succeeds on the upgraded Cluster Member M3.

  • Fails on the old Cluster Members M1 and M2 with a warning. Ignore this warning.

On each Cluster Member, examine the cluster state

Step

Instructions

1

Connect to the command line on each Cluster Member.

2

Examine the cluster state in one of these ways:

  • In Gaia Clish, run:

    show cluster state

  • In the Expert mode, run:

    cphaprob state

Multi-Version Cluster Upgrade Procedure - Gateway Mode (15)

Important:

  • In the High Availability mode, one of the upgraded Cluster Members (M2 or M3) changes its cluster state to Active.

    The other upgraded Cluster Member (M2 or M3) changes its cluster state to Standby.

  • In the Load Sharing modes, all Cluster Members must be in the Active state.

On the Cluster Member M2, upgrade to R81 with CPUSE, or perform a Clean Install of R81

Multi-Version Cluster Upgrade Procedure - Gateway Mode (17)

Important - You must reboot the Cluster Member after the upgrade or clean install.

Installation Method

Instructions

Upgrade to R81 with CPUSE

See Installing Software Packages on Gaia.

Follow the applicable action plan for the local or central installation.

In local installation, select the R81 package and perform Upgrade. See sk92449 for detailed steps.

Clean Install of R81 with CPUSE

See Installing Software Packages on Gaia.

Follow the applicable action plan for the local or central installation.

In local installation, select the R81 package and perform Clean Install. See sk92449 for detailed steps.

Multi-Version Cluster Upgrade Procedure - Gateway Mode (18)

Important - In the Gaia First Time Configuration Wizard, for the Management Connection IP address, you must use the same IP address as was used by the previous Cluster Member (prior to the upgrade).

Clean Install of R81 from scratch

Installing a Cluster Member

Follow Installing a ClusterXL Cluster - only the step "Install the Cluster Members".

Multi-Version Cluster Upgrade Procedure - Gateway Mode (19)

Important - In the Gaia First Time Configuration Wizard, for the Management Connection IP address, you must use the same IP address as was used by the previous Cluster Member (prior to the upgrade).

Installing a VRRP Cluster Member

Follow Installing a VRRP Cluster - only the step "Install the VRRP Cluster Members".

Multi-Version Cluster Upgrade Procedure - Gateway Mode (20)

Important - In the Gaia First Time Configuration Wizard, for the Management Connection IP address, you must use the same IP address as was used by the previous VRRP Cluster Member (prior to the upgrade).

In SmartConsole, establish SIC with the Cluster Member M2

Multi-Version Cluster Upgrade Procedure - Gateway Mode (22)

Important - This step is required only if you performed a Clean Install of R81 on this Cluster Member.

Step

Instructions

1

Connect with SmartConsole to the R81 Security Management Server or Main Domain Management Server that manages this Cluster.

2

From the left navigation panel, click Gateways & Servers.

3

Open the cluster object.

4

From the left tree, click Cluster Members.

5

Select the object of this Cluster Member.

6

Click Edit.

7

On the General tab, click the Communication button.

8

Click Reset.

9

In the One-time password field, enter the same Activation Key you entered during the First Time Configuration Wizard of the Cluster Member.

10

In the Confirm one-time password field, enter the same Activation Key again.

11

Click Initialize.

12

The Trust state field must show Trust established.

13

Click Close to close the Communication window.

14

Click OK to close the Cluster Member Properties window.

15

Click OK to close the Gateway Cluster Properties window.

16

Publish the SmartConsole session.

In SmartConsole, install the Access Control Policy on the R81 Cluster Member M3 and M2

Multi-Version Cluster Upgrade Procedure - Gateway Mode (24)

Important - This step is required only if you performed a Clean Install of R81 on the Cluster Member M2.

Step

Instructions

1

Click Install Policy.

2

In the Install Policy window:

  1. In the Policy field, select the applicable Access Control Policy.

  2. In the Install Mode section, select these two options:

    • Select Install on each selected gateway independently.

    • Clear For gateway clusters, if installation on a cluster member fails, do not install on that cluster.

  3. Click Install.

3

The Access Control Policy installation:

  • Succeeds on the upgraded Cluster Members M3 and M2.

  • Fails on the old Cluster Member M1 with a warning. Ignore this warning.

On the R81 Cluster Member M2, enable the MVC mechanism

Step

Instructions

1

Connect to the command line on the Cluster Member.

2

Enable the MVC Mechanism:

  • In Gaia Clish:

    set cluster member mvc on

  • In the Expert mode:

    cphaconf mvc on

3

Examine the state of the MVC Mechanism:

  • In Gaia Clish:

    show cluster members mvc

  • In the Expert mode:

    cphaprob mvc

In SmartConsole, install the Access Control Policy on the R81 Cluster Members M3 and M2

Step

Instructions

1

Click Install Policy.

2

In the Install Policy window:

  1. In the Policy field, select the applicable Access Control Policy.

  2. In the Install Mode section, select these two options:

    • Select Install on each selected gateway independently.

    • Clear For gateway clusters, if installation on a cluster member fails, do not install on that cluster.

  3. Click Install.

3

The Access Control Policy installation:

  • Succeeds on the upgraded Cluster Members M3 and M2.

  • Fails on the old Cluster Member M1 with a warning. Ignore this warning.

On each Cluster Member, examine the cluster state

Step

Instructions

1

Connect to the command line on each Cluster Member.

2

Examine the cluster state in one of these ways:

  • In Gaia Clish, run:

    show cluster state

  • In the Expert mode, run:

    cphaprob state

Multi-Version Cluster Upgrade Procedure - Gateway Mode (28)

Important:

  • In the High Availability mode, one of the upgraded Cluster Members (M2 or M3) changes its cluster state to Active.

    The other upgraded Cluster Member (M2 or M3) changes its cluster state to Standby.

  • In the Load Sharing modes, all Cluster Members must be in the Active state.

On the old Cluster Member M1, upgrade to R81 with CPUSE, or perform a Clean Install of R81

Multi-Version Cluster Upgrade Procedure - Gateway Mode (30)

Important - You must reboot the Cluster Member after the upgrade or clean install.

Installation Method

Instructions

Upgrade to R81 with CPUSE

See Installing Software Packages on Gaia.

Follow the applicable action plan for the local or central installation.

In local installation, select the R81 package and perform Upgrade. See sk92449 for detailed steps.

Clean Install of R81 with CPUSE

See Installing Software Packages on Gaia.

Follow the applicable action plan for the local or central installation.

In local installation, select the R81 package and perform Clean Install. See sk92449 for detailed steps.

Multi-Version Cluster Upgrade Procedure - Gateway Mode (31)

Important - In the Gaia First Time Configuration Wizard, for the Management Connection IP address, you must use the same IP address as was used by the previous Cluster Member (prior to the upgrade).

Clean Install of R81 from scratch

Installing a Cluster Member

Follow Installing a ClusterXL Cluster - only the step "Install the Cluster Members".

Multi-Version Cluster Upgrade Procedure - Gateway Mode (32)

Important - In the Gaia First Time Configuration Wizard, for the Management Connection IP address, you must use the same IP address as was used by the previous Cluster Member (prior to the upgrade).

Installing a VRRP Cluster Member

Follow Installing a VRRP Cluster - only the step "Install the VRRP Cluster Members".

Multi-Version Cluster Upgrade Procedure - Gateway Mode (33)

Important - In the Gaia First Time Configuration Wizard, for the Management Connection IP address, you must use the same IP address as was used by the previous VRRP Cluster Member (prior to the upgrade).

In SmartConsole, establish SIC with the Cluster Member M1

Multi-Version Cluster Upgrade Procedure - Gateway Mode (35)

Important - This step is required only if you performed a Clean Install of R81 on this Cluster Member.

Step

Instructions

1

Connect with SmartConsole to the R81 Security Management Server or Main Domain Management Server that manages this Cluster.

2

From the left navigation panel, click Gateways & Servers.

3

Open the cluster object.

4

From the left tree, click Cluster Members.

5

Select the object of this Cluster Member.

6

Click Edit.

7

On the General tab, click the Communication button.

8

Click Reset.

9

In the One-time password field, enter the same Activation Key you entered during the First Time Configuration Wizard of the Cluster Member.

10

In the Confirm one-time password field, enter the same Activation Key again.

11

Click Initialize.

12

The Trust state field must show Trust established.

13

Click Close to close the Communication window.

14

Click OK to close the Cluster Member Properties window.

15

Click OK to close the Gateway Cluster Properties window.

16

Publish the SmartConsole session.

In SmartConsole, install the Access Control Policy and Threat Prevention Policy on the Cluster object

Step

Instructions

1

Connect with SmartConsole to the R81 Security Management Server or Domain Management Server that manages this cluster.

2

From the left navigation panel, click Gateways & Servers.

3

Install the Access Control Policy:

  1. Click Install Policy.

  2. In the Policy field, select the applicable Access Control Policy.

  3. In the Install Mode section, select these two options:

    • Install on each selected gateway independently

    • For gateway clusters, if installation on a cluster member fails, do not install on that cluster

  4. Click Install.

  5. The Access Control Policy must install successfully on all the Cluster Members.

4

Install the Threat Prevention Policy:

  1. Click Install Policy.

  2. In the Policy field, select the applicable Threat Prevention Policy.

  3. Click Install.

  4. The Threat Prevention Policy must install successfully on all the Cluster Members.

On each Cluster Member, examine the cluster state

Step

Instructions

1

Connect to the command line on each Cluster Member.

2

Examine the cluster state in one of these ways:

  • In Gaia Clish, run:

    show cluster state

  • In the Expert mode, run:

    cphaprob state

Multi-Version Cluster Upgrade Procedure - Gateway Mode (38)

Important:

  • All Cluster Members must show the same information about the states of all Cluster Members.

  • In the High Availability mode, one Cluster Member must be in the Active state, and all other Cluster Members must be in Standby state.

  • In the Load Sharing modes, all Cluster Members must be in the Active state.

On each Cluster Member, disable the MVC mechanism

Step

Instructions

1

Connect to the command line on each Cluster Member.

2

Disable the MVC Mechanism:

  • In Gaia Clish:

    set cluster member mvc off

  • In the Expert mode:

    cphaconf mvc off

3

Examine the state of the MVC Mechanism:

  • In Gaia Clish:

    show cluster members mvc

  • In the Expert mode:

    cphaprob mvc

Multi-Version Cluster Upgrade Procedure - Gateway Mode (2024)

References

Top Articles
Is Darcey & Stacey returning for Season 5? Here's everything we know
Darcey Silva Shuts Down Ex Georgi Rusev for Good at Stacey and Florian's Wedding: 'I Don't Need You'
Jordanbush Only Fans
Dlnet Retiree Login
Team 1 Elite Club Invite
Northern Whooping Crane Festival highlights conservation and collaboration in Fort Smith, N.W.T. | CBC News
Klustron 9
Notary Ups Hours
Danielle Longet
Sitcoms Online Message Board
Thotsbook Com
Immediate Action Pathfinder
Pro Groom Prices – The Pet Centre
5808 W 110Th St Overland Park Ks 66211 Directions
David Turner Evangelist Net Worth
7 Low-Carb Foods That Fill You Up - Keto Tips
Flower Mound Clavicle Trauma
Bowlero (BOWL) Earnings Date and Reports 2024
Curtains - Cheap Ready Made Curtains - Deconovo UK
Craigslist Farm And Garden Tallahassee Florida
Procore Championship 2024 - PGA TOUR Golf Leaderboard | ESPN
Tnt Forum Activeboard
Boston Gang Map
Bj Alex Mangabuddy
Itziar Atienza Bikini
Craigslist West Valley
Silive Obituary
St Clair County Mi Mugshots
Craigslist Apartments Baltimore
Www.craigslist.com Austin Tx
Klsports Complex Belmont Photos
Login.castlebranch.com
Penn State Service Management
Why comparing against exchange rates from Google is wrong
Shaman's Path Puzzle
Blue Beetle Movie Tickets and Showtimes Near Me | Regal
Top-ranked Wisconsin beats Marquette in front of record volleyball crowd at Fiserv Forum. What we learned.
Gold Nugget at the Golden Nugget
Shane Gillis’s Fall and Rise
The best bagels in NYC, according to a New Yorker
Craigslist en Santa Cruz, California: Tu Guía Definitiva para Comprar, Vender e Intercambiar - First Republic Craigslist
Bill Manser Net Worth
Powerspec G512
Craigslist St Helens
Greatpeople.me Login Schedule
The Machine 2023 Showtimes Near Roxy Lebanon
Windy Bee Favor
Mkvcinemas Movies Free Download
Raley Scrubs - Midtown
Round Yellow Adderall
Phumikhmer 2022
Latest Posts
WoW Dreamsurges Boost Service - Buy Dreamsurges Event Carry
Nba Draftkings Picks For Tonight Cbs
Article information

Author: Amb. Frankie Simonis

Last Updated:

Views: 6494

Rating: 4.6 / 5 (56 voted)

Reviews: 95% of readers found this page helpful

Author information

Name: Amb. Frankie Simonis

Birthday: 1998-02-19

Address: 64841 Delmar Isle, North Wiley, OR 74073

Phone: +17844167847676

Job: Forward IT Agent

Hobby: LARPing, Kitesurfing, Sewing, Digital arts, Sand art, Gardening, Dance

Introduction: My name is Amb. Frankie Simonis, I am a hilarious, enchanting, energetic, cooperative, innocent, cute, joyous person who loves writing and wants to share my knowledge and understanding with you.