R62 Upgrade -- Gated Advance Routing Issues

[elliottrb]

I upgraded to R62 and it looks like it broke the advance routing feature set. Gated (Adv. Routing Process) no longer starts automatically, and I can no longer use the "router" alias to get me into the cligated utility to configure Adv. Routing. I can start everything manually and it works, but that's only good until a reboot... :(

I have verified that a clean R62 install does not have this issue. It is only when you upgrade (in my case R61 to R62). I have tested it on 3 gateways now.

[ngxfirewall]# chkconfig --list | grep gated returns nothing
[ngxfirewall]# ps –aux | grep gated returns only the grep process for gated
[ngxfirewall]# ver
This is Check Point SecurePlatform Pro NGX (R62) Build 031
[ngxfirewall]# router
/bin/router: line 7: /bin/cligated: No such file or directory
[ngxfirewall]# cligated
Unknown command "cligated"
[ngxfirewall]#cpconfig

Configuration Options:
----------------------

(1) Licenses
(2) SNMP Extension
(3) PKCS#11 Token
(4) Random Pool
(5) Secure Internal Communication
(6) Disable Advanced Routing
(7) Enable cluster membership for this gateway
(8) Automatic start of Check Point Products

Has anyone else seen this? How can I fix this? I need gated to start automatically. Should I manually add it to the startup files? If so please advise which files and exactly what needs to be added.

Thanks,
Rob

[Robby Cauwerts]

Did you try "pro disable" reboot and then "pro enble" reboot?

[chillyjim]

This is a known problem (Just saw it on another list). You can try and add the CPadvr package if Robby's responce doesn't work. Otherwise an upgrade_export/import and a clean install will fix it.

[elliottrb]

I did do a pro disable, reboot, and pro enable. No help... Hell, it's just the gateway. I can just reinstall from scratch and push the policy. I just wanted to make people aware of the issues I saw. It could be a major issue for someone who has a details advanced routing deployment and they upgrade to R62.

Thanks,
Rob

[chillyjim]

Originally Posted by elliottrb

It could be a major issue for someone who has a details advanced routing deployment and they upgrade to R62.

Someday Check Point will move the routing and interface config to the smartcenter. I really want my gateways to be FRU's (Field Replaceable Units).

[elliottrb]

A little more on this topic…

I upgraded from R61 to R62 using the patch add cd command and everything works fine. I validated that the R61 to R62 upgrade using SmartUpdate breaks the Advanced Routing feature set. Even though the adv. routing feature set is enabled, gated doesn’t start automatically and you cannot enter into the cligated configuration utility by using the router alias because it doesn’t exist.

Thanks to all who assisted.

Robbie