Installing a Jumbo Hotfix Accumulator

1

Connect a console to the Active Chassis. Make sure that all SGMs and SSMs are up to date and that the system is configured correctly.

# asg diag verify

2

Upload the Jumbo Hotfix Accumulator installation file to /home/admin/ directory on the Active Chassis.

3

Make a temporary directory.

# mkdir -v /home/admin/temp

4

Extract the Jumbo Hotfix Accumulator to the temporary directory.

# tar -xzvf /home/admin/Check_Point_R76SP_50_JHF.linux.tgz

-C /home/admin/temp/

5

Set Chassis B to administratively DOWN state.

> asg chassis_admin -c <Chassis_B_ID> down

6

Make sure that Chassis B is in administratively DOWN state.

> asg monitor -all

7

Install the Jumbo Hotfix Accumulator on Chassis B.

Note - Make sure to run the script from Chassis A and not Chassis B.

# cd /home/admin/temp/

# ./AsgInstallScript -b chassis<Chassis_B_ID>

Make sure that the Jumbo Hotfix Accumulator installation procedure completed successfully.

A summary message shows when the installation is complete.

8

If the installation was successful:

a. You are prompted to upgrade the SSM firmware. You can do this now or later.

b. Reboot the SGMs when prompted. Wait until all SGMs are UP.

If you do not upgrade the firmware now at the prompt, upgrade it later with:

# asg_ssm_upgrade

9

Make sure that all SGMs show the correct version.

Note - SGMs on Chassis A show as failed or show the old version. This is normal, and you can go to the next step.

# asg_version -v

10

Set Chassis B to administratively UP state.

> asg chassis_admin -c <Chassis_B_ID> up

11

Run the diagnostics.

# asg policy verify –v [-vs all]

# asg_route

12

Make sure that Chassis B is UP and enforces security.

Important - You must correct all errors shown by the diagnostics before you continue to the next step.

> asg stat -v

13

Set Chassis A to administratively DOWN state.

> asg chassis_admin -c <Chassis_A_ID> down

14

Make sure that all SGMs are UP, and that traffic flows normally on Chassis B.

Important - Make sure Chassis B works correctly before you upgrade Chassis A.

> asg monitor [-vs all]

> asg perf [-vs all] -v

15

Upload the Jumbo Hotfix Accumulator installation file to /home/admin/ directory on the Active Chassis.

16

Make a temporary directory.

# mkdir -v /home/admin/temp

17

Extract the Jumbo Hotfix Accumulator to the temporary directory.

# tar -xzvf /home/admin/Check_Point_R76SP_50_JHF.linux.tgz -C /home/admin/temp/

18

Make sure that Chassis A is in administratively DOWN state.

> asg monitor -all

19

Install the Jumbo Hotfix Accumulator on Chassis A.

Note - Make sure to run the script from Chassis B and not Chassis A.

# cd /home/admin/temp/

# ./AsgInstallScript -b chassis<Chassis_A_ID>

Confirm that the Jumbo Hotfix Accumulator installation procedure completed successfully.

A summary message shows when the installation is complete.

20

If the installation was successful:

a. You are prompted to upgrade the SSM firmware. You can do this now or later.

b. Reboot the SGMs when prompted. Wait until all SGMs are UP.

If you do not upgrade the firmware now at the prompt, upgrade it later with:

# asg_ssm_upgrade

21

Make sure that all SGMs show the correct version.

Note - SGMs on Chassis B show as failed or show the old version. This is normal, and you can go to the next step.

# asg_version -v

22

Set Chassis A to administratively UP state.

> asg chassis_admin -c <Chassis_A_ID> up

23

Run the diagnostics.

# asg policy verify –v [-vs all]

# asg_route

24

Make sure that Chassis A is UP and enforces security.

Important - You must correct all errors shown by the diagnostics before you continue to the next step.

> asg stat -v

25

Make sure all SGMs and SSMs are up to date and that the system is configured correctly.

# asg diag verify

26

Delete the installation files from all applicable SGMs.

# g_all rm –r /home/admin/temp/

# g_rm /home/admin/Check_Point_R76SP50_JHF.linux.tgz

Step

Operation

Command

1

Connect a console to the Active Chassis. Make sure that all SGMs and SSMs are up to date and that the system is configured correctly.

# asg diag verify

2

Upload the Jumbo Hotfix Accumulator installation file to /home/admin/ directory on the Chassis.

3

Make a temporary directory.

# mkdir -v /home/admin/temp

4

Extract the installation files to the temporary directory.

# tar -xzvf /home/admin/Check_Point_R76SP50_JHF.linux.tgz -C /home/admin/temp/

5

Go to the temporary directory and run the installation script.

Note - <Group_SGMs> are all SGMs in Group A or Group B as applicable.

# cd /home/admin/temp

# ./AsgInstallScript -b <Group_SGMs>

Best Practice - Connect a console to the SMO and run the next steps through the console connection.

6

Install the Jumbo Hotfix Accumulator.

# cd /home/admin/temp/

# ./AsgInstallScript –b <Group_SGMs>

7

Confirm that the Jumbo Hotfix Accumulator installation procedure completed successfully. A summary message shows when the installation is complete.

8

If the installation was successful:

a. You are prompted to upgrade the SSM firmware. You can do this now or later.

b. Reboot the SGMs when prompted. Wait until all SGMs are UP.

If you do not upgrade the firmware now at the prompt, upgrade it later with:

# asg_ssm_upgrade

9

Make sure that all SGMs show the correct version.

# asg_version -v

Best Practice - Install the Jumbo Hotfix Accumulator before executing the failover.