Working on the Initial Setup

1. To start the installation wizard run #setup
2. In the Welcome screen, press a key.
3. Select Set SGMs for Security Group
4. If installing a VSX Gateway: Choose only the current SGM
   Chassis 1, SGM 1 (slot 1 in Chassis 1)

   If installing a Security Gateway: Define the SGMs that belong to the Security Group. There are two lines, one for Chassis 1, one for Chassis 2.

   Enter one of these values in each line as applicable:

   • all (same as 1-12)
   • A range, such as 1-9
   • A number of comma-separated ranges, such as: 1-3,5-7
   • Individual SGMS, such as 1,4
   • A combination of individual SGMs and ranges, such as: 10,2, 3-7

   By default, the SGM you are connected belongs to the group: Chassis 1, SGM 1 (slot 1 in Chassis 1). To define a fully populated dual Chassis system select all in the top and bottom lines. For more about Security Gateway Module numbering, see 61000 Security System front panel components.

5. The subnet for internal communication in the Chassis is 192.0.2.0/24 by default. Change the IP address if there is a conflict with an existing subnet on your network.
6. Configure parameters for:
   • Host Name
   • Time and Date

   To configure the local time, choose the geographical area and city.

7. Select Network Connections.

   Configure the management ports and the data ports of the Security Switch Module.

   • There are 4 management ports on each SSM. Only configure those ports you use. To associate port names with the physical ports, see Security Switch Module Ports. For each management port configure:
     • An IP address
     • The net mask length
   • To associate data port names with the physical ports, see Security Switch Module Ports. For each data port configure:
     • An IP address
     • The net mask length
8. Configure Routing.

   Note - Wait 10-20 seconds for routing information to be updated throughout the system.

9. The Welcome to Check Point Suite screen shows. Wait for Check Point products packages to install.
10. Wait for the:
    • Installation Program Completed Successfully message to show.
    • Check Point Configuration Program to start.

      This program helps you to configure Check Point products.

11. Configure Secure Internal Communication (SIC).

    When prompted, enter and confirm the activation key. Remember this activation key. The same activation key is used for configuring the 61000 Security System object in SmartDashboard.

Configuration settings are applied, and the SGM reboots. Other Security Gateway Modules in the Security Group are installed automatically.

System Validation

Make sure that the initial system setup is completed successfully:

• Run the asg monitor command. An initial policy must be installed on the local SGM after initial setup completes and the SGM reboots.

• To monitor the automatic installation of other SGMs, run: tail -f /var/log/start_mbs.log.
• After installation, all SGMs in the security group must be UP and in the Initial Policy state.