Before Installing Firmware and Software

Installing Components and Connecting Cables:

• Install all components in the Chassis (SGMs, SSMs and CMMs).
• If you have a dual Chassis environment, connect only one Sync cable between the two Chassis. Connect eth1-Sync on chassis1 to eth1-Sync on chassis2. (Connect the second sync cable after installing software).

For IP management of the 41000 Security System, connect a cable to one of the management interfaces on chassis1.

Connecting over a Console

See Connecting over Console (Serial) Port.

Configuring a Security Group and a Management IP Address

1. Start the installation wizard. Run:

   # setup

2. In the Welcome screen, press a key.
3. Select Set SGMs for Security Group

   Define the SGMs that belong to the Security Group. There are two lines, one for Chassis 1, one for Chassis 2.

   In each line, you can enter:

   • all (same as 1-4)
   • A range, such as: 1-3
   • Single SGMS, such as: 1,4
   • A combination of single SGMs and ranges, such as: 1, 3-4.

   By default, the SGM you are connected to belongs to the group: Chassis 1, SGM 1 (slot 1 in Chassis 1).

   For more about Security Gateway Module numbering, see 61000/41000 Security System Front Panel Modules.

4. Select Network Connections.

   For the management interface, configure:

   • An IP address
   • The net mask length
5. Configure Routing.
   • If you are directly connected to the management interface: Skip this step.
   • If you are not directly connected to the management interface: Define a route that lets you access the 41000 Security System.
6. Click Next until you finish the installation wizard. At the Secure Internal Communication stage, enter a dummy key.

Configuration settings are applied, and the Security Gateway Modules reboots. Other Security Gateway Modules in the Security Group are installed automatically.

Validating the Initial System Setup:

To make sure that the initial system setup is completed successfully:

• Run the asg monitor command. An initial policy must be installed on the local SGM after initial setup completes and the SGM reboots.

  

• To monitor the automatic installation of other SGMs, run: tail -f /var/log/start_mbs.log.
• Wait until the installation process is complete.

  The installation process is complete when all the SGMs in the security group are UP and in the Initial Policy state.

SCP password for SSM160 firmware installation

Contact Check Point Support. All firmware installations should be performed with the assistance of the Check Point Support.