Upgrading the Cluster from R75.40VS and above

Two cluster members are used to maintain connectivity, while you upgrade all the other cluster members.

To use the Optimal Service Upgrade to upgrade the cluster members:

1. Disconnect all cluster members from the network, except for one cluster member.

   Make sure that the management interfaces are not connected to the network.

2. On the old cluster member (connected to the network), configure kernel parameters:
   • Upgrade to R77.30:

     Run: cphaconf cluster_id get

     Make sure all cluster members have the same cluster ID. If the cluster ID value is different on a cluster member, run this command to configure the correct value: cphaconf cluster_id set <value>

   • Upgrade to R77.20 and lower:

     Make sure all cluster members use the same value for the fwha_mac_magic parameter. Run: fw ctl get int fwha_mac_magic

     The default value for the fwha_mac_magic parameter is 254. If your configuration uses a different value, on each member, run: fw ctl set int fwha_mac_magic <value>

   For more about the cluster_id and fwha_mac_magic parameters, see the R80.10ClusterXL Administration Guide and sk25977.

3. Install R80.10 on all the cluster members that are not connected to the network.
4. Make sure that all the cluster members use the same kernel parameter values:
   • Upgrade to R77.30 and higher: Make sure all cluster members have the same cluster ID. On each member, run: cphaconf cluster_id get
     If a member has a different ID, run: cphaconf cluster_id set <value>
   • Upgrade to R77.20 and lower: Make sure all cluster members have the same value for this parameter: fw ctl get int fwha_mac_magic
     If a member has a different value, run: fw ctl set int fwha_mac_magic <value>
5. Prepare the old cluster member for synchronization of old connections with the upgraded cluster member:
   1. On the old cluster member, disable SecureXL - run: fwaccel off -a
   2. On the old cluster member, start the Optimal Service Upgrade - run: cphaosu start
6. Reconnect the SYNC interface of one new cluster member to the network.
7. Move traffic to the new cluster member that is connected to the network. Do these steps:
   1. Make sure the new cluster member is in Ready state. Run: cphaprob state
   2. Connect the other new cluster member interfaces to the network.
   3. On the new cluster member, run cphaosu start
   4. On the old cluster member, run cphaosu stat

      The network traffic statistics are shown.

   5. When the old cluster member does not have many connections, run cphaosu finish
8. On the new cluster member, run cphaosu finish
9. Disconnect the old cluster member from the network.
10. Reconnect the other new cluster members to the network one at a time. Do these steps on each cluster member:
    1. Run cphastop
    2. Connect the new cluster member to the network.
    3. Run cphastart
    4. In SmartConsole, change the version of the cluster object to R80.10 and install the Policy.
11. Upgrade the old cluster member and reconnect it to the network.
12. If the cluster has two members: In SmartConsole, change the version to R80.10.
13. Install the Access Control Policy.