Upgrading Hardware Components

Step

Operation

Command

1

Change the Standby Chassis to Admin DOWN state.

# asg chassis_admin –c <Chassis_B_ID> down

2

Connect to an SGM on the Standby Chassis with SSH or a serial console.

3

Download the applicable firmware version. Usually the latest recommended firmware file is located at:
$FWDIR/conf/hw_firmware/SM_update.tar

4

Copy and extract the file on the SGM to /var/log/.

# tar -xvf $FWDIR/conf/hw_firmware/SM_update.tar -C /var/log/

5

Remove all CMMs from the Standby Chassis.

6

Reinstall one CMM into the Standby Chassis.

7

Copy the firmware files from the SGM to the CMM /tmp/ directory.

The password is: admin

# scp /var/log/sentry.shmm500.* admin@198.51.100.33:/tmp/

8

Open a console connection to the serial port on the CMM front panel.

Use the Default parameters: 9600,8,N,1

9

Verify system health.

This confirms that all upgrade files and sentry files successfully copied to the CMM.

# clia shelf info_force_update

# ls /tmp

Important - We recommend that you manually enter the commands below. Because of the length of the command, copy/paste can cause unexpected behaviors.

10

Run these commands:

# cd /tmp

# setenv rc2 /etc/rc.asis

# clia terminate

# rupgrade_tool -s -v --r=sentry.shmm500.rfs --k=sentry.shmm500.kernel --u=sentry.shmm500.u-boot --hook=erase

11

Run the firmware installation script.

# install.sh

12

Follow the instructions on the screen.

When prompted, select the applicable Chassis parameters.

For more information about the PSU type, see sk91980.

Note - The screens that show can be slightly different.

Select one of following options.
1: Press 1 for AC1(Telkoor) or DC.
2: Press 2 for AC2(Lambda).
3: Press 3 for DC power records.

Power records Modification
1: Press 1 for AC power records.
2: Press 2 for DC power records.
3: Press 3 to skip.

EEprom upgrading
1: Press 1 for EEProm upgrading.
2: Press 2 to skip.

13

If the Chassis ID is 2, change the Chassis ID setting.

# sed -i 's/CHASSID="1"/CHASSID="2"/g' /etc/shmm.cfg

# reboot

14

Make sure Chassis ID is correct.

Outputs of these commands must be the same and must show correct Chassis ID.

If the outputs do not match, stop the procedure and contact Check Point Support immediately.

# grep SHMM_CHASSID /etc/shmm.cfg

# clia shelfaddress

15

To upgrade the second CMM:

• Remove the first upgraded CMM
• Install the second CMM
• Repeat Steps 7 - 13

16

Insert both of the CMMs and make sure the Active and Standby CMMs both have the same firmware version.

> asg_version -i

17

Set the Standby Chassis to Admin UP state.

> asg chassis_admin -c <Chassis_ID> up

18

To upgrade the second (Active) Chassis CMMs:

• Perform Chassis failover to the Standby Chassis
• Repeat Steps 1 - 17 on the new Standby Chassis

Step

Description

Command

1

Set the Standby Chassis to administratively DOWN state.

# asg chassis_admin –c <Chassis_B_ID> down

2

Open a console connection to the serial port on the Active and Standby CMMs on the Standby chassis.

Note - Use the Default parameters: 9600,8,N,1

3

Connect to an SGM on the Standby chassis over SSH, or a serial console.

4

Download the applicable firmware version.

The latest recommended firmware file is usually located here:

$FWDIR/conf/hw_firmware/SM_update.tar

5

Copy and extract the file on the SGM to /var/log.

# tar -xvf $FWDIR/conf/hw_firmware/SM_update.tar -C /var/log/

6

Terminate the Standby CMM.

To identify the Standby CMM:

# clia shmstatus

From the Standby CMM console connection:

# clia terminate

7

Copy the firmware files from the SGM to the active CMM in the /tmp/ directory.

The password is: admin

# scp /var/log/sentry.shmm500.* admin@198.51.100.33:/tmp/

8

Run these commands from the console connection to the Active CMM.

# cd /tmp

# setenv rc2 /etc/rc.asis

# clia terminate

# rupgrade_tool -s -v --r=sentry.shmm500.rfs --k=sentry.shmm500.kernel --u=sentry.shmm500.u-boot --hook=erase

9

Run the firmware installation executable.

Press Enter when prompted, to reboot the CMM.

# install.sh

10

Follow the instructions on the screen.

When prompted, select the applicable Chassis parameters.

For more information about the PSU type, see sk91980.

Note - The screens that show can differ slightly.

Select one of following options.

1: Press 1 for AC1(Telkoor) or DC.

2: Press 2 for AC2(Lambda).

3: Press 3 for DC power records.

Power records Modification

1: Press 1 for AC power records.

2: Press 2 for DC power records.

3: Press 3 to skip.

EEprom upgrading

1: Press 1 for EEProm upgrading.

2: Press 2 to skip.

11

If the Chassis ID is 2, change the Chassis ID setting.

# sed -i 's/CHASSID="1"/CHASSID="2"/g' /etc/shmm.cfg

# reboot

12

Make sure Chassis ID is correct.

Outputs of these commands must be the same and must show correct Chassis ID.

If the outputs do not match, stop the procedure and contact Check Point Support immediately.

# grep SHMM_CHASSID /etc/shmm.cfg

# clia shelfaddress

13

Terminate the Active CMM.

From the Active CMM console connection:

# clia terminate

# ifconfig eth0 down

# ifconfig eth1 down

14

Activate the Standby CMM, after reboot.

This CMM will be the Active CMM.

From the Standby CMM console connection:

# reboot

15

Install the firmware on the Active CMM.

Do Steps 7-11.

16

Activate the Standby CMM.

From the Standby CMM console connection:

# reboot

17

Make sure that the Active and Standby CMMs both have the same firmware version.

# asg_version -i

18

Set the Standby Chassis to administratively UP state.

# asg chassis_admin –c <Chassis_B_ID> up

19

To upgrade the second (Active) Chassis CMMs:

• Perform Chassis failover to the Standby Chassis
• Repeat Steps 1 - 18 on the new Standby Chassis