Re: Licensing Problem on New R65

I know for a fact that the P-1 MDG R65 has an issue with
applying
  CMA license via the MDG.  Checkpoint is aware of this
because
  I opened a TAC case on this and they gave me a new MDG to
fix
  this.  
   
  As far as the bge0:1 is concerns,  I did try this with NGx
R61
  and it worked for me.  CP must have changed this in NGx
R65

Hugo van der Kooij <hvdkooijVANDERKOOIJ.ORG> wrote:
  On Mon, 27 Aug 2007, Crist Clark wrote:

> I'm trying to set up a new SmartCenter on Solaris 10,
but
> something weird is going on with the licensing.
Whenever I
> try to connect from SmartDashboard, I get told the
license
> is invalid, but it looks fine to me. Here's when I load
the
> license,
>
> # cplic put 206.220.216.33 never
> *********-*********-*********-*********
CPVP-VEE-U-3DES-MGMT-NGX
> CPMP-DBVR-U-NGX CK-************
> Warning: The IP address of the license does not match
the IP address
> of the host
> Host Expiration Features
> 206.220.216.33 never CPVP-VEE-U-3DES-MGMT-NGX
CPMP-DBVR-U-NGX
> CK-************
>
> What's with that warning?
>
> # ifconfig -a
> lo0:1: flags=2001000849 mtu
> 8232 index 1
> inet 127.0.0.1 netmask ff000000
> bge0:1: flags=1000843 mtu 1500
> index 2
> inet 206.220.216.33 netmask ffffffc0 broadcast
206.220.216.63

The bge0:1 stuff is not supported. Any IP address on it will
not be valid 
as license IP address. What happened to the bge0 interface?

So please make bge0 work instead of bge0:1 with the license
IP address 
Then you should be fine.

Hugo.

-- 
hvdkooijvanderkooij.org http://hugo.vanderkooij.
org/
This message is using 100% recycled electrons.

Some men see computers as they are and say
"Windows"
I use computers with Linux and say "Why Windows?"
(Thanks JFK, for this quote of George Bernard Shaw.)

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================


       
---------------------------------
Got a little couch potato? 
Check out fun summer activities for kids.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

On Tue, 28 Aug 2007, cisco4ng wrote:

> I know for a fact that the P-1 MDG R65 has an issue
with applying
>  CMA license via the MDG.  Checkpoint is aware of this
because
>  I opened a TAC case on this and they gave me a new MDG
to fix
>  this.
>
>  As far as the bge0:1 is concerns,  I did try this with
NGx R61
>  and it worked for me.  CP must have changed this in
NGx R65

Great. Try 20 versions and see how many times it works. Try
10 engineers 
and ask them it if is supported.

Bot tscores are closer to 0 then 100% in my experience.

So our company states it is not support and we do not sort
out this sort 
of shit. We want stable networks and stable firewalls.

Hugo.

-- 
 	hvdkooijvanderkooij.org	http://hugo.vanderkooij.
org/
 	    This message is using 100% recycled electrons.

 	Some men see computers as they are and say
"Windows"
 	I use computers with Linux and say "Why
Windows?"
 	(Thanks JFK, for this quote of George Bernard Shaw.)

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Hello Crist,

Is not how you "name" the interfaces, I believe
what Hugo is talking about
is the fact that interfaces with secondary IPs is something
not supported to
be used as Licensed Interfaces. Which seems to be the case
when you have
something like bge0:1, instead of just bge0.

Something I just thought about is maybe this 206.220.x.x
address is assigned
to a secondary NIC on your SmartCenter. If you SMC has more
than one NIC and
maybe another one has the IP that identifies the object you
have in the GUI,
you might get a problem.

If that is the case, just go to the UserCenter and change
the IP of your
licenses to match the IP you have on the SMC object.

Regards

On 8/28/07, Hugo van der Kooij <hvdkooijvanderkooij.org> wrote:
>
> On Tue, 28 Aug 2007, cisco4ng wrote:
>
> > I know for a fact that the P-1 MDG R65 has an
issue with applying
> >  CMA license via the MDG.  Checkpoint is aware of
this because
> >  I opened a TAC case on this and they gave me a
new MDG to fix
> >  this.
> >
> >  As far as the bge0:1 is concerns,  I did try this
with NGx R61
> >  and it worked for me.  CP must have changed this
in NGx R65
>
> Great. Try 20 versions and see how many times it works.
Try 10 engineers
> and ask them it if is supported.
>
> Bot tscores are closer to 0 then 100% in my
experience.
>
> So our company states it is not support and we do not
sort out this sort
> of shit. We want stable networks and stable firewalls.
>
> Hugo.
>
> --
>         hvdkooijvanderkooij.org        http://hugo.vanderkooij.
org/
>             This message is using 100% recycled
electrons.
>
>         Some men see computers as they are and say
"Windows"
>         I use computers with Linux and say "Why
Windows?"
>         (Thanks JFK, for this quote of George Bernard
Shaw.)
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>



-- 
Sergio Alvarez
(506)8301342

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

>>> On 8/30/2007 at 7:59 AM, Sergio Alvarez
<seralvarGMAIL.COM> wrote:
> Hello Crist,
> 
> Is not how you "name" the interfaces, I
believe what Hugo is talking
about
> is the fact that interfaces with secondary IPs is
something not
supported to
> be used as Licensed Interfaces. Which seems to be the
case when you
have
> something like bge0:1, instead of just bge0.

But bge0:1 or bge<n>:<m> is all I'll ever have
in a non-global zone
in Solaris (AFAIK). So I guess that you can't run
SmartCenter in
a non-global zone in Solaris? That's just silly. Reason
number 1378
why Check Point's draconian licensing scheme hurts its
legitimate
customers.

I'm just waiting for my VAR to get a response from Check
Point to
get Check Point's stance this. I am not optimistic. In the
mean time,
I have the SmartCenter running in the global zone with the
IP
address on bge0 while I work through the other procedures
for my
upgrade. But I don't want to have to deploy that way.

> Something I just thought about is maybe this
206.220.x.x address is
assigned
> to a secondary NIC on your SmartCenter. If you SMC has
more than one
NIC and
> maybe another one has the IP that identifies the object
you have in
the GUI,
> you might get a problem.
> 
> If that is the case, just go to the UserCenter and
change the IP of
your
> licenses to match the IP you have on the SMC object.
> 
> Regards
> 
> On 8/28/07, Hugo van der Kooij <hvdkooijvanderkooij.org> wrote:
>>
>> On Tue, 28 Aug 2007, cisco4ng wrote:
>>
>> > I know for a fact that the P-1 MDG R65 has an
issue with applying
>> >  CMA license via the MDG.  Checkpoint is aware
of this because
>> >  I opened a TAC case on this and they gave me
a new MDG to fix
>> >  this.
>> >
>> >  As far as the bge0:1 is concerns,  I did try
this with NGx R61
>> >  and it worked for me.  CP must have changed
this in NGx R65
>>
>> Great. Try 20 versions and see how many times it
works. Try 10
engineers
>> and ask them it if is supported.
>>
>> Bot tscores are closer to 0 then 100% in my
experience.
>>
>> So our company states it is not support and we do
not sort out this
sort
>> of shit. We want stable networks and stable
firewalls.


B¼information contained in this e-mail message is
confidential, intended
only for the use of the individual or entity named above. If
the reader
of this e-mail is not the intended recipient, or the
employee or agent
responsible to deliver it to the intended recipient, you are
hereby
notified that any review, dissemination, distribution or
copying of this
communication is strictly prohibited. If you have received
this e-mail
in error, please contact postmasterglobalstar.com 

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================