Description:

This article describes how to perform a firmware update on Unified Firewalls in an HA cluster.

In order to update the firmware in an HA cluster, the cluster must be synchronized!

Firmware update process in an HA cluster

  • The Primary Firewall downloads the update and transfers it to the Secondary Firewall via the HA interface.
  • The Secondary Firewall installs the update and becomes the new Primary Firewall.
  • The Primary Firewall becomes the Secondary Firewall and also updates the firmware.

This approach means that only minimal downtime is to be expected.


Requirements:

  • LANCOM R&S®Unified Firewall as of LCOS FX 10.4
  • Configured and functional HA cluster
  • Pairing of the HA cluster with the LMC must have been done already (if the firmware update is to be performed via the LMC)
  • Any web browser for accessing the LMC
  • Web browser to access the Unified Firewall via the webinterface

    The following browsers are supported:
    • Google Chrome
    • Chromium
    • Mozilla Firefox


Procedure:

1) Performing the firmware update of an HA cluster via the webinterface:

1.1) On the Primary Firewall make sure, that the Status under High Availability is shown as Synchronized in the Overview.

Afterwards click on Updates, to change to the Updates Settings menu.

1.2) Click on Install for the update you want.



2) Performing the firmware update of an HA cluster via the LMC:

2.1) In the LMC change to the System information tab of the  Primary Firewall and make sure, that under UF HA cluster information the State of the Secondary Firewall is shown as Synchronized.

2.2) In the menu Devices click on Firmware for the Primary Firewall, to change to the Firmware update menu.

2.3) Select the New firmware in the dropdown menu and click Update.