Upgrading the CMM Firmware on N+N Chassis

You can upgrade or downgrade the CMM firmware version on an N+N Chassis.

In a Dual-Chassis configuration, upgrade the CMMs on the Standby Chassis first. Then fail over the current Active Chassis and upgrade it. After the upgrade or downgrade, all CMMs in both Chassis must have the same firmware version.

Important - At some stages during this procedure, the Chassis will not have a functional CMM. At these times, hardware monitoring data is not collected and the Chassis fans rotate at maximum speed.

Notes:

When the command includes -c enter the Chassis ID only, not the word Chassis.
For example: # asg chassis_admin -c <1> OR <2> down
There are two possible procedures to upgrade or downgrade the CMM Firmware.

Procedure 1 - With Physical Access to the Chassis

Use this procedure to upgrade or downgrade the CMM Firmware on an N+N Chassis, if there is physical access to the Chassis.

Step	Operation	Command
1	Set the Standby Chassis to Admin DOWN state.	`# asg chassis_admin –c <`Chassis_B_ID`> down`
2	Connect to an SGM on the Standby Chassis over SSH, or a serial console.
3	Download the applicable firmware version. Usually the latest recommended firmware file is located here: `$FWDIR/conf/hw_firmware/SM700CC_update.tar`
4	Copy and extract the file on the SGM to `/var/log/`.	`# tar -xvf $FWDIR/conf/hw_firmware/SM700CC_update.tar -C /var/log/`
5	Remove all CMMs from the Standby Chassis.
6	Reinstall one CMM into the Standby Chassis.
7	Copy the firmware files from the SGM to the CMM in the `/tmp/` directory. The password is: `admin`	`# scp /var/log/sentry.shmm700.* admin@198.51.100.33:/tmp/`
8	Open a console connection to the serial port on the CMM front panel and run the following commands: Note - Use the default console parameters: `9600,8,N,1`	`# cd /tmp` `# clia terminate` `# setenv custcnf C00013` `# setenv rc2 /etc/rc.0000-14` `# rupgrade --erase-all --base file:///tmp/sentry.shmm700. -k kernel -r rfs -a app`
9	Run the firmware installation executable. Note - If the screen becomes unreadable during the upgrade procedure, change the console screen baud rate.	`# install.sh`
10	If the Chassis ID is `2`, change the Chassis ID setting.	`# sed -i 's/CHASSID="1"/CHASSID="2"/g' /etc/shmm.cfg` `# reboot`
11	Make sure Chassis ID is correct. Outputs of these commands must be the same and must show correct Chassis ID. If the outputs do not match, stop the procedure and contact Check Point Support immediately.	# grep SHMM_CHASSID /etc/shmm.cfg # clia shelfaddress
12	To upgrade the second CMM: Remove the first upgraded CMM Install the second CMM Repeat Steps 7 - 10
13	Insert both of the CMMs and make sure that Active and Standby CMMs both have the same firmware version.	`> asg_version -i`
14	Set the Standby Chassis to administratively UP state.	`# asg chassis_admin –c <`Chassis_B_ID`> up`
15	To upgrade the second (Active) Chassis CMMs: Perform Chassis failover to the Standby Chassis Repeat Steps 1 - 13 on the new Standby Chassis

Procedure 2 - No Physical Access to the Chassis

Use this procedure to upgrade or downgrade the CMM Firmware on an N+N Chassis, if there is no physical access to the Chassis.

This procedure requires a console connection to both CMMs.

Step	Description	Command
1	Set the Standby Chassis to administratively DOWN state.	`# asg chassis_admin –c <`Chassis_B_ID`> down`
2	Open a console connection to the serial port on the Active and Standby CMMs on the Standby chassis. Note - Use the Default parameters: 9600,8,N,1
3	Connect to an SGM on the Standby chassis over SSH, or a serial console.
4	Download the applicable firmware version. The latest recommended firmware file is usually located here: `$FWDIR/conf/hw_firmware/SM700CC_update.tar`
5	Copy and extract the file on the SGM to `/var/log`.	`# tar -xvf $FWDIR/conf/hw_firmware/SM700CC_update.tar -C /var/log/`
6	Terminate the Standby CMM.	To identify the Standby CMM: `# clia shmstatus` From the Standby CMM console connection: `# clia terminate`
7	Copy the firmware files from the SGM to the active CMM in the `/tmp/` directory. The password is: `admin`	`# scp /var/log/sentry.shmm700.* admin@198.51.100.33:/tmp/`
8	Run these commands from the console connection to the Active CMM. Note – After CMM reboot, the following lines are displayed: `<INFO> Write confirmed: 1 -> 0 [ALLOW]` `<INFO> Write upgrade_state: "in progress" (2) -> "confirmed" (4) [ALLOW]` `<INFO> Write upgrade watchdog: 1 -> 0 [ALLOW]` Press Enter to get the login prompt.	`# cd /tmp` `# clia terminate` `# setenv custcnf C00013` `# setenv rc2 /etc/rc.0000-14` `# rupgrade --erase-all --base file:///tmp/sentry.shmm700. -k kernel -r rfs -a app`
9	Run the firmware installation executable. Press Enter when prompted, to reboot the CMM. Note - If the screen becomes unreadable during the upgrade procedure, change the console screen baud rate.	`# install.sh`
10	If the Chassis ID is 2, change the Chassis ID setting.	`# sed -i 's/CHASSID="1"/CHASSID="2"/g' /etc/shmm.cfg` `# reboot`
11	Make sure Chassis ID is correct. Outputs of these commands must be the same and must show correct Chassis ID. If the outputs do not match, stop the procedure and contact Check Point Support immediately.	# grep SHMM_CHASSID /etc/shmm.cfg # clia shelfaddress
12	Terminate the Active CMM.	From the Active CMM console connection: `# clia terminate` `# ifconfig eth0 down` `# ifconfig eth1 down`
13	Activate the Standby CMM, after reboot. This CMM will be the Active CMM.	From the Standby CMM console connection: `# reboot`
14	Install the firmware on the Active CMM. Do Steps 7-10.
15	Activate the Standby CMM.	From the Standby CMM console connection: `# reboot`
16	Make sure that the Active and Standby CMMs both have the same firmware version.	`# asg_version -i`
17	Set the Standby Chassis to administratively UP state.	`# asg chassis_admin –c <`Chassis_B_ID`> up`
18	To upgrade the second (Active) Chassis CMMs: Perform Chassis failover to the Standby Chassis Repeat Steps 1 - 17 on the new Standby Chassis