Support Center > Search Results > SecureKnowledge Details
Upgrade single VSX Gateway from any version to R77.10 using clean install Technical Level
Solution

Refer to the main sk97552 (VSX Reconfigure and Upgrade Matrix to R77.10 / R77.20).

 

When to use this procedure

  • Upgrading single VSX Gateway from any version to R77.10 (using clean installation).

 

Part 1 - Upgrade of single VSX Gateway

  1. Backup the involved machines at the same time:

    • Security Management Server / Multi-Domain Security Management Server
    • Single VSX Gateway

    Note: Refer to "Related Documentation" section below - "How to Backup".

  2. Perform clean installation of R77.10 on the single VSX Gateway machine (refer to "Related Documentation" section below).

  3. Run Gaia First Time Configuration Wizard on the single VSX Gateway (refer to sk71000 and sk69701).
    In case of recovery from a failure, you must use the same Management IP address as was used by the previous cluster member (prior to the failure).

  4. In case Bonding needs to be configured, then configure it now on the single VSX Gateway. Refer to the R77 Gaia Administration Guide.

  5. Install the required licenses on the single VSX Gateway using cplic put command.

  6. Proceed to Part 2 of this procedure ("Upgrade of Security Management Server / Multi-Domain Security Management Server").

 

Part 2 - Upgrade of Security Management Server / Multi-Domain Security Management Server

  1. If required, upgrade your Security Management Server / Multi-Domain Security Management Server to the desired version.

    R77.10 Security Gateways (in Gateway mode and in VSX mode) can be managed by the following Security Management Servers / Multi-Domain Security Management Servers:

    Note: Only features relevant to the version installed on the Security Management Servers / Multi-Domain Security Management Server will be available in SmartDashboard and in 'vsx_util' command.
    Examples:
    • You will not be able to upgrade the single VSX Gateway configuration from R77 to R77.10, if you manage it with R77 Security Management server.
    • You will not be able to use Mobile Access Blade on VSX R77.10, if you manage it with R76 Security Management server.


  2. Upgrade the configuration of the single VSX Gateway object to R77.10 version on the Security Management Server / Main Domain Management Server.

    Note:

    • If your single VSX Gateway object is R77, and you do not want new R77.10 features on the single VSX Gateway, then skip this step (proceed to Step 3 below).
    • If your single VSX Gateway object is R76 and lower, then this step is mandatory.

    Run the 'vsx_util upgrade' command and follow on-screen instructions.
    Select your single VSX Gateway and then select the R77.10 version.

    Important Note: On Management Server R77.20 and lower, when 'vsx_util upgrade' operation completes, user is prompted to reconfigure the VSX machines. User must refuse - select "no" - and proceed to Step 3 below.

  3. Start the manual reconfigure process on the Security Management Server / Main Domain Management Server.

    Run the 'vsx_util reconfigure' command and follow on-screen instructions.

    Important Note: If you have vital configuration in Gaia OS / FireWall / SecureXL / CoreXL / etc. (e.g., Dynamic Routing, DHCP Relay, $FWDIR/boot/modules/fwkern.conf, $PPKDIR/boot/modules/simkern.conf, $FWDIR/conf/fwaffinity.conf, or any other special configuration), then do NOT reboot after the reconfigure operation. First, reconfigure the required Gaia OS settings in Clish, add the required settings in the configuration files, and only then reboot the machine.

 

Related Documentation

Show / Hide documentation

Documents:

 

Solutions:

 

How to Backup:

This solution is about products that are no longer supported and it will not be updated

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment