Open Frames Download Complete PDF Send Feedback Print This Page

Previous

Next

Upgrading SSM60 to SSM160

To prepare the 61000/41000 Security System for the SSM upgrade:

  1. Connect to the 61000/41000 Security System.
  2. Save the output from the following:

    > asg if

    > asg stat -v

    > asg diag

    > asg_version

  3. Create a backup of the configuration:
    > g_all backup_system backup ssm60
  4. Make sure the SSM160s have the correct firmware version.
    • R75.035 is only compatible with SSM160 firmware 2.4.B6
    • R75.050 is only compatible with SSM160 firmware 2.4.B11
    • R75.40VS is only compatible with SSM160 firmware 2.4.B27.2
    • R76SP and higher are only compatible with SSM160 firmware 2.4.C10

To replace the SSM on Chassis B:

  1. Disconnect the Chassis B cables from the network.
  2. Turn off all SGMs in the Chassis.
  3. Replace both SSM60's with SSM160's in the disconnected Chassis.
  4. Wait for both SSM160 to boot up. This can take a few minutes.
  5. Make sure that the SSM160s have the correct firmware installed.
  6. If the SSM160s do not have the correct firmware installed, upgrade the firmware.
  7. Turn on all the SGMs.
  8. Make sure that all SGMs are UP:

    > asg_monitor

    This step can take a few minutes.

  9. Run:

    > asg dxl dist_mode set –f

  10. Reconfigure management interfaces if necessary.
  11. Make sure the SSM firmware version is correct:

    > asg_version

  12. Run:

    > asg if

    > asg stat -v

    > asg diag

    > asg_version

  13. Make sure that the output matches the results from the preparation stage.
  14. Make sure that all SGMs are UP and the Chassis is Active.
  15. Run:

    > ethtool eth1-[1-16] and ethtool eth2-[1-16]

    > asg hw_monitor

    > g_fw ctl set int fwha_gratuitous_arp_timeout 100

  16. Make sure that all interfaces are set up correctly.

To upgrade the SSM on Chassis A:

  1. Disconnect the cables from the Chassis A.
  2. Connect the cables to the new upgraded Chassis B. Take into account the change in the management interface in step 15.
  3. Optional: Run:

    > asg_chassis_ctrl clear_mac_learning

  4. Make sure that traffic is processed by the new Active upgraded Chassis B.

    At this point, you can roll back to Chassis B if needed.

  5. Do steps 2-16 on Chassis A in the earlier procedure.
  6. Connect the Sync network cables between the Chassis.
  7. Connect the management and traffic interface cables. Take into account the change in the management interface in step 15.
  8. Make sure that both Chassis communicate.
  9. Run:

    > asg stat –v

  10. Make sure that the Active & Standby Chassis and all SGMs are UP.
  11. Get the topology and install the policy.
  12. Make sure the new management port configuration takes effect.
  13. Configure GARPs on Chassis B to their defaults:

    > g_fw ctl set int fwha_gratuitous_arp_timeout 600

 
Top of Page ©2015 Check Point Software Technologies Ltd. All rights reserved. Download PDF Send Feedback Print