Upgrading the CMM Firmware on N+1 Chassis

It is possible to upgrade or downgrade a CMM firmware version.

Important:

  • The procedure below applies only to CMM500.

  • In a Dual Chassis configuration, all CMMs must have the same firmware version.

    1. Upgrade the CMM Firmware on the Standby Chassis

    2. Fail over from the Active Chassis to the Standby Chassis

    3. Upgrade the CMM Firmware on the former Active Chassis

  • At certain points during this procedure, the CMM functionality is interrupted.

    At these times, hardware monitoring data is not collected and the chassis fans rotate at maximum speed.

Notes:

  • When the command includes the "-c" parameter, enter the Standby Chassis ID number only, not the word "chassis".

    For example: asg chassis_admin -c 1 down

  • When the command includes the "-b" parameter, enter the word "chassis" and after it enter the Standby Chassis ID number.

    For example: g_reboot -a -b chassis1

Best Practice - We recommend that you manually enter the commands below. Because of the command syntax is long, a mistake can occur if you copy and paste it. Incorrect syntax can causes an unexpected behavior.

Part 1 - Upgrading the CMM Firmware on the Standby Chassis

In this part, you upgrade the CMM firmware on the Standby Chassis.

Step

Operation

Command

1

Connect to the command line on the Standby Chassis.

 

2

Log in to the Expert mode.

 
3

Set the state of the Standby Chassis to Admin DOWN.

asg chassis_admin -c <Standby Chassis ID> down

4

Connect to the command line on an SGM on the Standby Chassis.

Connect SSH or a serial console.

 
5

Get the applicable firmware version.

Usually the latest recommended firmware file is located here:

$SMODIR/conf/hw_firmware/SM_update.tar

 
6

Extract the firmware image on the SGM to the /var/log/ directory.

tar -xvf $SMODIR/conf/hw_firmware/SM_update.tar -C /var/log/

7

Pull out all CMMs on the Standby Chassis.

 
8

Insert one CMM into the Standby Chassis.

 
9

Copy the firmware files from the SGM to the /tmp/ directory on the CMM.

The password is: admin

# scp /var/log/sentry.shmm500.* admin@198.51.100.33:/tmp/

10

Open a console connection to the serial port on the CMM's front panel.

Use the default connection parameters:

  • Baud Rate: 9600
  • Data bits: 8
  • Stop bits: 1
  • Parity: None
  • Flow Control: None

 
11

Make sure the system health is normal.

This confirms that all upgrade files and sentry files were successfully copied to the CMM.

# clia shelf info_force_update

# ls /tmp

12

Copy the CMM firmware image.

cd /tmp

setenv rc2 /etc/rc.asis

clia terminate

rupgrade_tool -s -v --r=sentry.shmm500.rfs --k=sentry.shmm500.kernel --u=sentry.shmm500.u-boot --hook=erase

13

Run the firmware installation script.

When prompted, press Enter to reboot the CMM.

Note - If the screen becomes unreadable during the upgrade procedure, change the baud rate of the console connection.

install.sh

14

Follow the instructions on the screen.

When prompted, select the applicable chassis parameters.

For more information about the PSU type, see sk91980.

Note- The screens that appear can be slightly different than appears on the right.

Select one of following options.

1: Press 1 for AC1(Telkoor) or DC.

2: Press 2 for AC2(Lambda).

3: Press 3 for DC power records.

Power records Modification
1: Press 1 for AC power records.
2: Press 2 for DC power records.
3: Press 3 to skip.

EEprom upgrading
1: Press 1 for EEProm upgrading.
2: Press 2 to skip.

15

If the Standby Chassis ID is 2, change the Standby Chassis ID setting from "1" to "2".

sed -i 's/CHASSID="1"/CHASSID="2"/g' /etc/shmm.cfg

reboot

16

Make sure the Standby Chassis ID is correct.

Outputs of the commands listed on the right must be the same and must show the correct Standby Chassis ID.

Important - If outputs of these commands do not match, stop the entire procedure and contact Check Point Support immediately.

grep SHMM_CHASSID /etc/shmm.cfg

clia shelfaddress

17

To upgrade the second CMM:

  1. Pull out the first upgraded CMM

  2. Insert the second CMM

  3. Repeat Steps 1 - 16

 

18

Insert the first upgraded CMM.

 

19

Go to Gaia gClish: enter gclish and press Enter.

 

20

Make sure the Active and Standby CMMs have the same firmware version.

asg_version -i

21

Set the state of the Standby Chassis to Admin UP.

asg chassis_admin -c <Standby Chassis ID> up

Part 2 - Failing Over from Active Chassis to Standby Chassis

In this part, you fail over all connections from the Active Chassis to the Standby Chassis.

Step

Instructions

22

Connect to the command line on the Active Chassis.

23

Log in to the Expert mode.

24

Set the state of the Active Chassis to "down":

asg chassis_admin -c <Standby Chassis ID> down

Example:

asg chassis_admin -c 2 down

Part 3 - Upgrading the CMM Firmware on the former Active Chassis

In this part, you upgrade the CMM firmware on the former Active Chassis.

Step

Operation

Command
25

Connect to the command line on the former Active Chassis.

 
26

Log in to the Expert mode.

 
27

Set the state of the former Active Chassis to Admin DOWN.

asg chassis_admin -c <Standby Chassis ID> down

28

Connect to the command line on an SGM on the former Active Chassis.

Connect SSH or a serial console.

 
29

Get the applicable firmware version.

Usually the latest recommended firmware file is located here:

$SMODIR/conf/hw_firmware/SM_update.tar

 
30

Extract the firmware image on the SGM to the /var/log/ directory.

tar -xvf $SMODIR/conf/hw_firmware/SM_update.tar -C /var/log/

31

Pull out all CMMs on the former Active Chassis.

 
32

Insert one CMM into the former Active Chassis.

 
33

Copy the firmware files from the SGM to the /tmp/ directory on the CMM.

The password is: admin

# scp /var/log/sentry.shmm500.* admin@198.51.100.33:/tmp/

34

Open a console connection to the serial port on the CMM's front panel.

Use the default connection parameters:

  • Baud Rate: 9600
  • Data bits: 8
  • Stop bits: 1
  • Parity: None
  • Flow Control: None

 
35

Make sure the system health is normal.

This confirms that all upgrade files and sentry files were successfully copied to the CMM.

# clia shelf info_force_update

# ls /tmp

36

Copy the CMM firmware image.

cd /tmp

setenv rc2 /etc/rc.asis

clia terminate

rupgrade_tool -s -v --r=sentry.shmm500.rfs --k=sentry.shmm500.kernel --u=sentry.shmm500.u-boot --hook=erase

37

Run the firmware installation script.

install.sh

38

Follow the instructions on the screen.

When prompted, select the applicable chassis parameters.

For more information about the PSU type, see sk91980.

Note- The screens that appear can be slightly different than appears on the right.

Select one of following options.

1: Press 1 for AC1(Telkoor) or DC.

2: Press 2 for AC2(Lambda).

3: Press 3 for DC power records.

Power records Modification
1: Press 1 for AC power records.
2: Press 2 for DC power records.
3: Press 3 to skip.

EEprom upgrading
1: Press 1 for EEProm upgrading.
2: Press 2 to skip.

39

If the Standby Chassis ID is 2, change the Standby Chassis ID setting from "1" to "2".

sed -i 's/CHASSID="1"/CHASSID="2"/g' /etc/shmm.cfg

reboot

40

Make sure the Standby Chassis ID is correct.

Outputs of the commands listed on the right must be the same and must show the correct Standby Chassis ID.

Important - If outputs of these commands do not match, stop the entire procedure and contact Check Point Support immediately.

grep SHMM_CHASSID /etc/shmm.cfg

clia shelfaddress

41

To upgrade the second CMM:

  1. Pull out the first upgraded CMM

  2. Insert the second CMM

  3. Repeat Steps 25 - 40

 
42

Insert the first upgraded CMM.

 
43

Go to Gaia gClish: enter gclish and press Enter.

 
44

Make sure the Active and Standby CMMs have the same firmware version.

asg_version -i

45

Set the state of the former Active Chassis to Admin UP.

Important - If the former Active Chassis is configured as "Primary Up", an automatic fallback occurs.

asg chassis_admin -c <Standby Chassis ID> up