manual upgrade notes
77.20 to 77.30
installer verions check...
cpvinfo $DADIR/bin/DAService | grep Build
upgrade installer
rpm -Uhv --force CPda-00-00.i386-1278.rpm
check base fw ver
installer import local Check_Point_R77.30_T204_Install_and_Upgrade.tgz installer install Check_Point_R77.30_T204_Install_and_Upgrade.tgz
rebooted by installer
77.30 to hotfix to post build script
touch /etc/.wizard_accepted
cpconfig
rpm -ihv --force CPppak-R77-00.i386.rpm
reboot
cpconfig to enable securexl (not needed)
cpconfig to configure corexl instances
configure $FWDIR/boot/modules/fwkern.conf
(13800 example)
fwx_nat_dynamic_port_allocation=1
fwx_old_icmp_nat=1
fw_drop_icmp_errors_over_tcp=1
fwkern_optimize_drops_support=1
fwha_monitor_if_link_state=0
clish> set core-dump enable
reboot
installer import local Check_Point_R77_30_JUMBO_HF_1_Bundle_T216_FULL.tgz
installer install Check_Point_R77_30_JUMBO_HF_1_Bundle_T216_FULL.tgz
reboot (installer)
- mkdir HF_INSTALL
- cd HF_INSTALL
- tar xvfz ../SecurePlatform_HOTFIX_R7730_T216_JHF_879.tgz
- ./SecurePlatform_HOTFIX_R7730_T216_JHF_879_990879001_1
reboot