Step 8: Initial Software Configuration

In This Section: Connecting over Console (Serial) Port Running the Initial Setup

When you install and configure the 60000/40000 Security Platform, start with the Security Gateway Module furthest to the left in the Chassis. After the first SGM is configured, installation and configuration settings are automatically propagated to all other SGMs in the defined security group. The Security Group is the group of SGMs that make up the Security Gateway.

Note - In SmartDashboard, one Security Gateway object represents all the SGMs in the security group.

Connecting over Console (Serial) Port

Connecting a Console

1. Connect the DB9 serial cable to the console (serial) port on the far, left-hand SGM in the chassis.

   See:

   • 64000 Security System Front Panel
   • 44000 Security System Front Panel
   • 61000 N+N Security System Front Panel
   • 61000 Security System Front Panel
   • 41000 Security System Front Panel

   Example:

   

2. Connect the other end of the cable to the serial port on your computer.
3. Define the communication parameters in your terminal emulation application (for example, PuTTY):
   • Serial port - 9600 BPS, 8 bits, no parity, 1 stop bit
   • Flow control - None
4. Turn on the 60000/40000 Security Platform.
5. Log in with these credentials:
   • username = admin
   • password = admin

Running the Initial Setup

1. To start the installation wizard run:

   # setup

2. In the Welcome screen, press any key.
3. Select Set SGMs for Security Group.
4. Define the SGMs that belong to the Security Group.

   

   There are two lines, one for Chassis 1, one for chassis 2. In each line, you can enter:

   • all (same as 1-12)
   • A range, such as: 1-9
   • A number of comma-separated ranges, such as: 1-3,5-7
   • Single SGMs, such as: 1,4
   • A combination of single SGMs and ranges, such as: 10,2, 3-7.

   By default, the SGM you are connected belongs to the group: Chassis 1, SGM 1 (slot 1 in chassis 1). To define a fully populated dual chassis system, select all in the top and bottom lines. For more about Security Gateway Module numbering, see the front panel of your appliance.

5. The subnet for internal communication in the chassis is 192.0.2.0/24 by default. Change the IP address, if it conflicts with an existing subnet on your network.
6. Configure parameters for:
   • Host Name
   • Time and Date.

     To configure the local time, choose the geographical area and city.

7. Select Network Connections.

   Configure the management ports and the data ports of the Security Switch Module.

   • There are 4 management ports on each SSM. Only configure those ports you intend to use. To associate port names with the physical ports, refer to Security Switch Module Ports. For each management port configure:
     • An IP address
     • The net mask length
   • To associate data port names with the physical ports, refer to Security Switch Module Ports. For each data port configure:
     • An IP address
     • The net mask length
8. Configure Routing.

   Note - Wait 10-20 seconds for routing information to be updated throughout the system.

9. The Welcome to Check Point Suite screen shows. Wait for Check Point products packages to install.
10. Wait for the:
    • Installation Program Completed Successfully message to show
    • Check Point Configuration Program to start.

      This program guides you through the configuration of Check Point products.

11. Configure Secure Internal Communication.

    When prompted, enter and confirm the activation key. Remember this activation key. The same activation key is used for configuring the 60000/40000 Security Platform object in SmartDashboard.

Configuration settings are applied, and the SGM reboots. The other Security Gateway Modules in the security group install automatically.

System Validation

To make sure that the initial system setup completed successfully:

• Run:

  # asg monitor

  An Initial Policy must be installed on the local SGM after initial setup completes and the SGM reboots.

  

• To monitor the automatic installation of other SGMs, run:

  # tail -f /var/log/start_mbs.log

• After installation, all the SGMs in the security group must be in the Initial Policy state.