Replacement of Nokia IP390

[Clon32]

Hi All,

I need to replace a NOKIA IP350 & install "Checkpoint VPN-1 (TM) & Firewall-1 (R) NG with Application Intelligence (R55) hfa_12.

I have checked the Checkpoint website for documenation to step through this procedure but cannot find any suitable information!

I have a backup of the origional firewall so I only need an install guide for the IPSO & software packages

Could anybody be so kind as to point me in the right direction ?

[mcnallym]

Do you have the original cd that came withe the Nokia as this has good documentation however.

Step 1: Place the ipso.tgz file for the ipso you want to install onto an FTP Server. This can be anonymous ftp or you will need to know the username and password.

Step 2: Attach console cable to the Nokia IP350

Step 3: Reboot the Nokia and where it gets to the screen about loading boot manager, press any key to enter, then press a key on the keyboard. This will drop you at the bootmgr> prompt.

Step 4: Type Install and then follow the script supplying IP details, Interface settings and FTP Settings

Step 5: At the end reboot the Nokia and when it comes backup, FTP the Check Point R55 wrapper onto the box into the /var/admin directory.

Step 6: Use the newpkg command and then select from local machine and then /var/admin and it will run through and install the CHeck Point wrapper for you.

Step 7: Run through the cpconfig script to setup the Check Point

Step 8: Get the backup file into /var/backup on the box.

Step 9: Use the Restore in Voyager to restore the config from the backup file.

[Clon32]

Thanks mcnallym,

I have another question, will the backup include the SIC or will this need to be reset ?

[mcnallym]

Providing you backed up the contents of the Check Point directories then the SIC should hold, however I personally tend to reset the SIC. It is a one time password between the manager and the gateway so is no great deal to have to reset.

[Clon32]

Thanks,
Unfortunately, the firewall is part of a cluster so I will need to have the SIC included in the backup as I don’t want to reset the SIC on the live firewall.
Will the SIC included in the backup override the sic set in the when configuring the CPCONFIG

[mcnallym]

It should do but I tend to reset the SIC anyway, just a personal thing.