Changing the VSX Cluster Type

This section presents procedures for converting VSX Cluster between High Availability and VSLS.

Changing the VSX Cluster mode involves the use of the vsx_util convert_cluster command on the Management Server.

Converting from VSLS to High Availability

Do these procedures to convert a VSX Cluster from VSLS to High Availability:

1. Redistribute all Active Virtual Systems to one VSX Cluster Member
2. Disable the VSLS options
3. Convert the VSX Cluster to High Availability

Redistributing Active Virtual Systems to One VSX Cluster Member

To redistribute all active Virtual Systems to one VSX Cluster Member:

1. Close all SmartConsole windows.
2. Connect to the command line on the Management Server.
3. Log in to the Expert mode.
4. Run:

   vsx_util vsls

5. Enter the IP address for the Security Management Server or Domain Management Server.
6. Enter the Management Server administrator user name and password.
7. Select the VSX Cluster.
8. From the Load Sharing menu, enter 3. Set all VSs active on one member.
9. Enter the number of the VSX Cluster Member that is hosting the Active Virtual Systems.
10. Enter Y to save and apply the configuration.
11. Exit the Load Sharing menu.

When the vsx_util convert_cluster command finishes, there should be only one Active VSX Cluster Member, on which all Virtual Systems are in the Active state, and one Standby VSX Cluster Member, on which all Virtual Systems are in the Standby state. Any additional VSX Cluster Members should be in Standby state, and their Virtual Systems in the Down state.

Disabling VSLS Options

To convert existing VSX Cluster Members to the VSX High Availability mode:

Perform these steps on each VSX Cluster Member:

1. Connect to the command line.
2. Log in to the Expert mode.
3. Run:

   cpconfig

4. Disable the Per Virtual System State.
5. Disable the ClusterXL for Bridge Active/Standby.
6. Restart the Check Point services (this can cause cluster failover):

   cpstop ; cpstart

Converting the Cluster

To convert the VSX Cluster to High Availability:

1. Connect to the command line on the Management Server.
2. Log in to the Expert mode.
3. Run:

   vsx_util convert_cluster

4. Enter the IP address for the Security Management Server or Main Domain Management Server used to manage this VSX Cluster.
5. Enter the Management Server administrator user name and password.
6. From the Load Sharing menu, enter 3. Set all VSs active on one member.
7. Select the VSX Cluster.
8. Enter:

   HA

9. Reboot each VSX Cluster Members (this can cause cluster failover).
10. On each VSX Cluster Member:
    1. Connect to the command line.
    2. Examine the VSX configuration:

       vsx state -v

    3. Examine the VSX Cluster state and configuration:

       cphaprob state

Converting from High Availability to VSLS

To convert an existing VSX Cluster from High Availability to VSLS:

1. Close all SmartConsole windows.
2. On each VSX Cluster Member:
   1. Run:

      cpconfig

   2. Enable the Per Virtual System State.
   3. Enable ClusterXL for Bridge Active/Standby.
   1. Restart the Check Point services:

      cpstop ; cpstart

3. On the Management Server:
   1. Connect to the command line.
   2. Log in to the Expert mode.
   3. Run:

      vsx_util convert_cluster

   4. Enter the IP address of the Security Management Server or Domain Management Server.
   5. Enter the Management Server administrator user name and password.
   6. Select the VSX Cluster.
   7. Enter:

      LS

   8. At the Proceed with conversion? prompt, enter: y
   9. Select an option to distribute Virtual Systems among VSX Cluster Members:
      • Distribute all Virtual Systems equally.
      • Set all Virtual Systems as Active on the same VSX Cluster Member.
4. Reboot each VSX Cluster Member.
5. On each VSX Cluster Member:
   1. Connect to the command line.
   2. Examine the VSX configuration:

      vsx state -v

   3. Examine the VSX Cluster state and configuration:

      cphaprob state

Note - You cannot convert a VSX Cluster to the VSLS mode, if it contains Virtual Systems in the Active/Active Bridge mode or Virtual Routers.

Sample Command Output

The following screen printout shows an example of the output from the vsx_util convert_cluster command.

This sample output is for versions R77.10 and higher.

vsx_util convert_cluster   ************************************************* Note: the operation you are about to perform changes the information in the management database. Back up the database before continuing. ************************************************* Enter Security Management Server/main Domain Management Server IP address (Hit 'ENTER' for 'localhost'): Enter Administrator Name: Enter Administrator Password: Select VSX cluster object name: 1) vsx_cluster_A 2) vsx_cluster_B Select: 1 Enter desired ClusterXL mode: HA-High Availability, LS-Load Sharing (HA | LS): LS   All modules must be in the 'Per VS State' mode to conclude this operation successfully. Use the command cpconfig on each module to verify compliance before continuing with the operation. When converting a cluster, there are two options for distributing the existing Virtual System(s) among cluster members: 1. Distribute all Virtual Systems so that each cluster member is equally loaded. 2. Set all Virtual Systems as Active on the same cluster member.   After converting the cluster, the command vsx_util redistribute_vsls may be used to modify Virtual System distribution. Enter distribution option (1-2) [1]: 1   Converting the cluster to ClusterXL Load Sharing mode... The cluster was successfully converted to ClusterXL Load Sharing mode Installing new policy... ... Policy installation finished successfully.