Changing the VSX Cluster Type

This section presents procedures for converting VSX Cluster between High Availability and VSLS.

Changing the VSX Cluster mode involves the use of the vsx_util convert_cluster command on the Management Server.

Converting from VSLS to High Availability

Do these procedures to convert a VSX Cluster from VSLS to High Availability:

1. Redistribute all Active Virtual Systems to one VSX Cluster Member
2. Disable the VSLS options
3. Convert the VSX Cluster to High Availability

Redistributing Active Virtual Systems to One VSX Cluster Member

To redistribute all active Virtual Systems to one VSX Cluster Member:

1. Close all SmartConsole windows.
2. Connect to the command line on the Management Server.
3. Log in to the Expert mode.
4. Run:

   vsx_util vsls

5. Enter the IP address for the Security Management Server or Domain Management Server.
6. Enter the Management Server administrator user name and password.
7. Select the VSX Cluster.
8. From the Load Sharing menu, enter 3. Set all VSs active on one member.
9. Enter the number of the VSX Cluster Member that is hosting the Active Virtual Systems.
10. Enter Y to save and apply the configuration.
11. Exit the Load Sharing menu.

When the vsx_util convert_cluster command finishes, there should be only one Active VSX Cluster Member, on which all Virtual Systems are in the Active state, and one Standby VSX Cluster Member, on which all Virtual Systems are in the Standby state. Any additional VSX Cluster Members should be in Standby state, and their Virtual Systems in the Down state.

Disabling VSLS Options

To convert existing VSX Cluster Members to the VSX High Availability mode:

Perform these steps on each VSX Cluster Member:

1. Connect to the command line.
2. Log in to the Expert mode.
3. Run:

   cpconfig

4. Disable the Per Virtual System State.
5. Disable the ClusterXL for Bridge Active/Standby.
6. Restart the Check Point services (this can cause cluster failover):

   cpstop ; cpstart

Converting the Cluster

To convert the VSX Cluster to High Availability:

1. Connect to the command line on the Management Server.
2. Log in to the Expert mode.
3. Run:

   vsx_util convert_cluster

4. Enter the IP address for the Security Management Server or Main Domain Management Server used to manage this VSX Cluster.
5. Enter the Management Server administrator user name and password.
6. From the Load Sharing menu, enter 3. Set all VSs active on one member.
7. Select the VSX Cluster.
8. Enter:

   HA

9. Reboot each VSX Cluster Members (this can cause cluster failover).
10. On each VSX Cluster Member:
    1. Connect to the command line.
    2. Examine the VSX configuration:

       vsx state -v

    3. Examine the VSX Cluster state and configuration:

       cphaprob state

Converting from High Availability to VSLS

To convert an existing VSX Cluster from High Availability to VSLS:

1. Close all SmartConsole windows.
2. On each VSX Cluster Member:
   1. Run:

      cpconfig

   2. Enable the Per Virtual System State.
   3. Enable ClusterXL for Bridge Active/Standby.
   1. Restart the Check Point services:

      cpstop ; cpstart

3. On the Management Server:
   1. Connect to the command line.
   2. Log in to the Expert mode.
   3. Run:

      vsx_util convert_cluster

   4. Enter the IP address of the Security Management Server or Domain Management Server.
   5. Enter the Management Server administrator user name and password.
   6. Select the VSX Cluster.
   7. Enter:

      LS

   8. At the Proceed with conversion? prompt, enter: y
   9. Select an option to distribute Virtual Systems among VSX Cluster Members:
      • Distribute all Virtual Systems equally.
      • Set all Virtual Systems as Active on the same VSX Cluster Member.
4. Reboot each VSX Cluster Member.
5. On each VSX Cluster Member:
   1. Connect to the command line.
   2. Examine the VSX configuration:

      vsx state -v

   3. Examine the VSX Cluster state and configuration:

      cphaprob state

Note - You cannot convert a VSX Cluster to the VSLS mode, if it contains Virtual Systems in the Active/Active Bridge mode or Virtual Routers.