CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We've already had our first sign-ups!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 6/9, 7/14, 8/25, 10/6, 11/3, 12/8.
3. We have new forums in Portuguese and German (see below).
4. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
5. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Licensing
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-03-17
mcarey mcarey is offline
Member
 
Join Date: 2006-05-08
Posts: 51
mcarey has an average reputation (10+)
Default IP address for NAT'd CLM

Upgraded a CLM from R55P to R62 and went to push out the new NGX license, but the license would not apply to SmartDashboard because the IP address on the license is not the same IP defined on the object in SmartDashboard.

The problem is the CLM is defined in the MDS as it's public IP address, but the CLM is actually behind another firewall and is NAT'ing to that address, so its real IP address is 192.168.x.x. This was the setup in NG AI R55 and worked fine, but I can't get it to work in R62 and don't know how they got this working before.

I can only create a license with the public address and push it out successfully, but when trying to sign into the GUI, it shows me the fingerprint, but says no license exist when logging into the server localhost, iserver 4 (hostname), or the private address?

How can I apply the license with the private address to the CLM defined with a public address in the MDS??
Reply With Quote
  #2 (permalink)  
Old 2008-03-17
Thorpuse Thorpuse is offline
Senior Member
 
Join Date: 2007-07-16
Posts: 279
Thorpuse has an average reputation (10+)
Default Re: IP address for NAT'd CLM

Use a Local License and install it on the CLM's Private IP address locally.
Reply With Quote
  #3 (permalink)  
Old 2008-03-18
mcarey mcarey is offline
Member
 
Join Date: 2006-05-08
Posts: 51
mcarey has an average reputation (10+)
Default Re: IP address for NAT'd CLM

It hit me last night. I guess I've always used SmartUpdate to push license and never thought to revert to the "old" days of physically installing a license.

Thanks
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 15:48.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0