Running the First Time Configuration Wizard in CLI Expert mode

Description

Use this command in the Expert mode to test and to run the GaiaClosed Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. First Time Configuration Wizard on a Security GroupClosed A logical group of Security Appliances that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. Every Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected. for the first time.

Notes:

  • The "config_system" tool is not an interactive configuration tool. It helps automate the first time configuration process.

  • The "config_system" tool is only for the first time configuration, and not for ongoing system configurations.

Syntax

Run one of these:

Form

Command

Short form

config_system -h

Long form

config_system --help

Run one of these:

Form

Command

Short form

config_system -l

Long form

config_system --list-params

Run one of these:

Form

Command

Short form

config_system -f <Path and Filename>

Long form

config_system --config-file <Path and Filename>

Run one of these:

Form

Command

Short form

config_system -s <String>

Long form

config_system --config-string <String>

Run one of these:

Form

Command

Short form

config_system -t <Path>

Long form

config_system --create-template <Path>

Run:

config_system --dry-run

Procedure

Step

Instructions

1

Run this command in Expert mode:

config_system --config-string <String of Parameters and Values>

A configuration string must consist of parameter=value pairs, separated by the ampersand (&).

You must enclose the whole string between quotation marks.

For example:

"hostname=myhost&ftw_sic_key=abc123&timezone='US/Eastern'&install_security_vsx=true"

For more information on valid parameters and values, run the "config_system -h" command.

2

Reboot the system.

Step

Instructions

1

Run this command in Expert mode:

config_system -t <File Name>

2

Open the file you created in a text editor.

3

Edit all parameter values as necessary.

4

Save the updated configuration file.

Run this command in Expert mode:

config_system --config-file <File Name> --dry-run

Step

Instructions

1

Run this command in Expert mode:

config_system -f <File Name>

2

Reboot the system.

If you do not have a configuration file, you can create a configuration template and fill in the parameter values as necessary.

Before you run the First Time Configuration Wizard, you can validate the configuration file you created.

Parameters

A configuration file contains the "<parameter>=<value>" pairs described in the table below.

Note - The "config_system" parameters can change from Gaia version to Gaia version. Run the "config_system --help" command to see the available parameters.

Parameter

Description

Valid values

install_security_vsx

Installs VSX GatewayClosed Physical server that hosts VSX virtual networks, including all Virtual Devices that provide the functionality of physical network devices. It holds at least one Virtual System, which is called VS0., if its value is set to "true".

  • true

  • false (default)

ftw_sic_key

Configures a Secure Internal Communication key, if the value of the "install_security_managment" parameter is set to "false".

A string of alphanumeric characters (between 4 and 127 characters long).

hostname

Configures the name of the local host (optional).

A string of alphanumeric characters.

sg_cluster_id

For Check Point Support use only.

 

timezone

Configures the Area/Region (optional).

The Area/Region must be enclosed between single quotation marks.

Examples:
'America/New_York'
'Asia/Tokyo'

Note - To see the available Areas and Regions, connect to any Gaia computer, log in to Gaia ClishClosed The name of the default command line shell in Check Point Gaia operating system. This is a restricted shell (role-based administration controls the number of commands available in the shell)., and run this command (names of Areas and Regions are case-sensitive):
set timezone Area<SPACE><TAB>