> Source: [sk97552](https://support.checkpoint.com/results/sk/sk97552) # sk97552 - VSX Reconfigure and Upgrade Matrix to R77.10 / R77.20 / R77.30 | Property | Value | |----------|-------| | Solution ID | sk97552 | | Date Created | 2013-12-04 | | Last Modified | 2022-10-05 | | Technical Level | General | | Products | Security Gateway | | Versions | R82.10, R82, R81.20 | | OS | Gaia | ## Solution **Table of Contents:** 1. Introduction 2. Reconfigure 1. Procedures 2. Limitations 3. Upgrade 1. Methods 2. Procedures 4. Rollback 5. Notes 6. Related documentation ***Important Note:** To upgrade VSX to **R80.10 and higher** versions, refer to the Installation and Upgrade Guide of the version, to which you upgrade. ([R80.10](https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_Installation_and_Upgrade_Guide/html_frameset.htm), [R80.20](https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_Installation_and_Upgrade_Guide/html_frameset.htm), [R80.30](https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_Installation_and_Upgrade_Guide/html_frameset.htm), [R80.40](https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_Installation_and_Upgrade_Guide/Default.htm), [R81](https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Installation_and_Upgrade_Guide/Default.htm), [R81.10](https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_Installation_and_Upgrade_Guide/Default.htm))* (1) Introduction {#Introduction} -------------------------------- This article describes the following procedures for VSX Gateway / VSX Cluster Members: * reconfiguring (R77.10 / R77.20 / R77.30) - used to replace / rebuild the VSX machine after a failure or RMA * upgrading (to R77.10 / R77.20 / R77.30) - used to upgrade the VSX machine to higher release * rollback (from R77.20 / R77.30) - used to downgrade the VSX machine from R77.20 / R77.30 In contrast to non-VSX gateways, the VSX configuration resides on the Security Management Server / Domain Security Management Server that manages the VSX Gateway / VSX cluster member / Virtual Devices (VS, VSW, VR, VSB): * Configuration that is stored on the Security Management Server / Domain Security Management Server: * names of VSX objects * configuration of Wrp/Wrpj interfaces * VSX routes * etc. * Local configuration that is stored on the VSX Gateway / VSX cluster member itself: * OS configuration (e.g., DNS, NTP, DHCP, Dynamic Routing, etc.) * any settings manually defined in various configuration files on VSX machine * etc. (2) Reconfigure process {#Reconfigure} -------------------------------------- In the event of a catastrophic failure of a VSX Gateway / VSX cluster member, you can use the '`vsx_util reconfigure`' command to restore the configuration of VSX Gateway / VSX cluster member, including the configuration of Virtual Devices (VS, VSW, VR, VSB). ### (2-A) Reconfigure Procedures {#Reconfigure Procedures} |---------------------|----------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------| | Version | Reconfigure VSX Cluster Member | Reconfigure single VSX Gateway | | **R77.20 / R77.30** | [sk101515](http://supportcontent.checkpoint.com/solutions?id=sk101515 "Reconfigure VSX Cluster member R77.20") | [sk101517](http://supportcontent.checkpoint.com/solutions?id=sk101517 "Reconfigure single VSX Gateway R77.10 / R77.20") | | **R77.10** | [sk101516](http://supportcontent.checkpoint.com/solutions?id=sk101516 "Reconfigure VSX Cluster member R77.10") | [sk101517](http://supportcontent.checkpoint.com/solutions?id=sk101517 "Reconfigure single VSX Gateway R77.10 / R77.20") | ### (2-B) Reconfigure Limitations {#Reconfigure Limitations} The reconfigure process does **not** restore the local configuration that was performed on VSX Gateway / VSX cluster member itself. These settings have to be reconfigured manually from scratch / from backed up files. The following will **not** be restored during the reconfigure process: * Any OS configuration (e.g., DNS, NTP, DHCP, Dynamic Routing, DHCP Relay, etc.) * Backup files and snapshots saved on the VSX Gateway / VSX cluster member in the past. * Any settings manually defined in various configuration files on VSX machine. * Any Check Point configuration files. Note: Some of these files do not exist by default. Some files are configured per VSX Gateway / VSX cluster member, and some files are configured per Virtual System. List of most important files (many others exist): * $FWDIR/boot/modules/fwkern.conf * * $FWDIR/boot/modules/vpnkern.conf * * $PPKDIR/boot/modules/simkern.conf * * $PPKDIR/boot/modules/sim_aff.conf * * $FWDIR/conf/fwaffinity.conf * * $FWDIR/conf/fwauthd.conf * * $FWDIR/conf/local.arp * * $FWDIR/conf/discntd.if * * $FWDIR/conf/cpha_bond_ls_config.conf * * $FWDIR/conf/resctrl * * $FWDIR/conf/vsaffinity_exception.conf * * $FWDIR/database/qos_policy.C * * /var/ace/sdconf.rec * * /var/ace/sdopts.rec * * /var/ace/sdstatus.12 * * /var/ace/securid * ` ` (3) Upgrade process {#Upgrade} ------------------------------ ### (3-A) Upgrade Methods {#Upgrade Methods} VSX Gateway / VSX cluster member can be upgraded either by clean install, or by in-place upgrade (for minor releases only): * **Clean install** - this procedure is available for upgrade from any version either to R77.10, to R77.20, or to R77.30. Note: Before using clean install upgrade, refer to section "(2-B) Reconfigure Limitations". * **In-place upgrade** - this procedure is available only for upgrade either from R77 to R77.10, or from R77 to R77.20, or from R77 to R77.30, or from R77.10 to R77.20, or from R77.10 to R77.30, or from R77.20 to R77.30. This procedure keeps all previous configurations. ### (3-B) Upgrade Procedures {#Upgrade Procedures} |------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------| | Upgrade Path | Upgrade VSX Cluster | Upgrade single VSX Gateway | | **Clean install upgrade from any version to R77.20 / R77.30** | [sk101518](http://supportcontent.checkpoint.com/solutions?id=sk101518 "Upgrade VSX Cluster from any version to R77.20 using clean install") | [sk101519](http://supportcontent.checkpoint.com/solutions?id=sk101519 "Upgrade single VSX Gateway from any version to R77.20 using clean install") | | **Clean install upgrade from any version to R77.10** | [sk101520](http://supportcontent.checkpoint.com/solutions?id=sk101520 "Upgrade VSX Cluster from any version to R77.10 using clean install") | [sk101521](http://supportcontent.checkpoint.com/solutions?id=sk101521 "Upgrade single VSX Gateway from any version to R77.10 using clean install") | | **In-place upgrade from R77 / R77.10 to R77.20 / R77.30 or from R77.20 to R77.30** | [sk101522](http://supportcontent.checkpoint.com/solutions?id=sk101522 "Upgrade VSX Cluster from R77 / R77.10 to R77.20 using in-place upgrade") | [sk101523](http://supportcontent.checkpoint.com/solutions?id=sk101523 "Upgrade single VSX Gateway from R77 / R77.10 to R77.20 using in-place upgrade") | | **In-place upgrade from R77 to R77.10** | [sk101529](http://supportcontent.checkpoint.com/solutions?id=sk101529 "Upgrade VSX Cluster from R77 to R77.10 using in-place upgrade") | [sk101530](http://supportcontent.checkpoint.com/solutions?id=sk101530 "Upgrade single VSX Gateway from R77 to R77.10 using in-place upgrade") | **Important Note:** You must collect a complete backup of the Security Management Server / Multi-Domain Security Management Server and of the involved VSX Gateway / VSX cluster member. This will be used in case of rollback. Transfer the backup files to an external storage before the upgrade process. (4) Rollback process {#Rollback} -------------------------------- In case of problem during the upgrade process, you can perform rollback to your previous state. |---------------------|-------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------| | From Version | Rollback VSX Cluster | Rollback single VSX Gateway | | **R77.20 / R77.30** | [sk101534](http://supportcontent.checkpoint.com/solutions?id=sk101534 "Rollback VSX Cluster from R77.20 to previous version") | [sk101563](http://supportcontent.checkpoint.com/solutions?id=sk101563 "Rollback single VSX Gateway from R77.20 to previous version") | (5) Notes {#Notes} ------------------ * **In-place upgrade** is supported only: * from R77 to R77.10 / R77.20 / R77.30 * from R77.10 to R77.20 / R77.30 * from R77.20 to R77.30

* R77.10, R77.20, and R77.30 Security Gateways (both in Gateway mode and in VSX mode) can be managed by the following Security Management Servers / Multi-Domain Security Management Servers: * R76 with hotfix from [sk97626 (How to manage R77.10 / R77.20 / R77.30 gateway with R76 Security Management server)](http://supportcontent.checkpoint.com/solutions?id=sk97626) * R77 GA * R77.10 * R77.20 * R77.30 * R80 GA
**Important Note:** Only features relevant to the version installed on the Security Management Servers / Multi-Domain Security Management Server will be available in SmartDashboard and in '`vsx_util`' command. *Examples* : * You will not be able to upgrade the VSX Gateway / VSX cluster configuration from R77 to R77.20, if you manage it with R77 Security Management server. * You will not be able to use Mobile Access Blade on VSX R77.10, if you manage it with R76 Security Management server. * You will not be able to use Multi Bridge capability on R77.30, if you manage it with prior version to R77.30 Security Management server.

* When upgrading **from R77.20 with installed R77.20 Jumbo Hotfix Accumulator to R77.30** , refer to [sk101975: Jumbo Hotfix Accumulator for R77.20](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk101975#How to upgrade to R77.30) - section "How to upgrade to R77.30". (6) Related documentation {#Related documentation} -------------------------------------------------- * [sk104859 - Check Point R77.30](http://supportcontent.checkpoint.com/solutions?id=sk104859) * [sk101208 - Check Point R77.20](http://supportcontent.checkpoint.com/solutions?id=sk101208) * [sk97617 - Check Point R77.10](http://supportcontent.checkpoint.com/solutions?id=sk97617) * Release Notes ([R76](http://supportcontent.checkpoint.com/documentation_download?id=22933), [R77](http://supportcontent.checkpoint.com/documentation_download?id=24827), [R77.10](http://supportcontent.checkpoint.com/documentation_download?id=30257), [R77.20](http://supportcontent.checkpoint.com/documentation_download?id=31853), [R77.30](http://supportcontent.checkpoint.com/documentation_download?ID=40107), [R80](http://supportcontent.checkpoint.com/documentation_download?id=46538)). * VSX Administration Guide ([VSX NGX R65](http://supportcontent.checkpoint.com/documentation_download?id=7944), [VSX NGX R67](http://supportcontent.checkpoint.com/documentation_download?id=10165), [R75.40VS](http://supportcontent.checkpoint.com/documentation_download?id=16383), [R76](http://supportcontent.checkpoint.com/documentation_download?id=22932), [R77](http://supportcontent.checkpoint.com/documentation_download?id=24802), [R80](http://supportcontent.checkpoint.com/documentation_download?id=46537)). * Installation and Upgrade Guide ([R76](http://supportcontent.checkpoint.com/documentation_download?id=22901), [R77 Gaia](http://supportcontent.checkpoint.com/documentation_download?id=24831), [R77 Non-Gaia](http://supportcontent.checkpoint.com/documentation_download?id=30531)). * Gaia Administration Guide ([R76](http://supportcontent.checkpoint.com/documentation_download?id=22928), [R77](http://supportcontent.checkpoint.com/documentation_download?id=24828)). * SecurePlatform Administration Guide ([R76](http://supportcontent.checkpoint.com/documentation_download?id=22919), [R77](http://supportcontent.checkpoint.com/documentation_download?id=24810)). * Command Line Interface Reference Guide ([R76](http://supportcontent.checkpoint.com/documentation_download?id=22909), [R77](http://supportcontent.checkpoint.com/documentation_download?id=24833)). --- # Agent Instructions This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products. ## Navigating This Knowledge Base - **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt) - **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml) - **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}` - **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content