[Packet]

dantro: thanks for confirming - but some kinda cmd line/scriptable/automated thing would be ideal - if you know of any.

mcnallym: not sure about that, honestly.
when i installed the enforcement module as part of the checkpoint install on the host, it asked me if an interface was DAIP and i chose 'yes' to that.

i just tried adding a new gateway object - now i might be doing something wrong here, but it seems to me that i cant define any interface properties to be dhcp enabled if i dont choose the checkbox next to 'dynamic address' in 'general properties' (side-effect of dynamic address is that the 'remote access' etc settings disappear - which is the next battle coz i wanted a client to site vpn)

now whether this is due to the fact that i had chosen DAIP when i first installed the said enforcement module, i dont know for sure.

seems to be that if a static address is defined in the 'general properties' page, it will not allow any other interface to be set to dhcp/dynamic.
atleast that's how it appears to me in the topology section.
as ever, open to all suggestions.