Checkpoint Firewall upgrade failed
Posted on 2011-04-27
We have (2) Nokia ip560's, they were running ipso 4.2 and r65, had vendor upgrade management server (splat) no issue. Then took secondary 560 out of cluster, upgraded ipso to 6.2, then upgraded to R71, no issue, then when we tried to join it back to cluster with existing primary that is on ipso 4.2 and R65, it fails with -> Cluster password authentication failure. We went in and verified it had correct password, then tried again, same error. We then went into Primary box did "change password" and tried it with new password, same error?
I've read through a ton of notes, and even ipso 6.2 release notes and it says that 6.2 will work with 4.2?
I received this reply from CPUG posting I put up:
You can not make any working Cluster with different software versions. R65 will never works together with R71, both cluster member should have the same version of CP software.
I then forwarded his reply to our FW vendor and this is what he said:
The information you provided is true. However, we were trying to bring the secondary unit into the IPSO cluster, which was prior to turning on the Checkpoint piece on the unit.
This IPSO clustering is to be independent of applications running on the units.