Not just Nokia, other platforms will let you get by on the sub interface
licensing. Not the case with splat, if not the main interface IP then
the license will not stick, you could add an additional interface ;)
-GS
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of
cisco4ng
Sent: Sunday, December 17, 2006 10:10 PM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] checkpoint NG with AI R55 License question
I have a checkpoint NG with AI R55 license in distributed model
(management and firewall
are on separate boxes).
If I use SPLAT as the management server and assign 172.16.1.1/24 and I
have a license
with IP 192.18.15.100, I assign a sub interface, eth0:1, and give it
192.168.15.100. I even
put in /etc/rc.d/rc.local file so that this IP will be there at boot
time. After I apply the
license, I can not log into the management server because it tells me
that the smart center
does not have the license.
If I use the Nokia IP650 running IPSO 3.7.1 build 025 with NG AI R55
with HFA_18 as a
SmartCenter, I assigned ip 172.16.1.1/24 and then I assigned a
secondary IP address
of 192.168.15.100 to the same interface. After that, I can log into
the SmartCenter with
the SmartDashboard. I then can use that SmartCenter to manage other
Nokia Enforcement
Modules and those Enforcement Modules perform SIC with the SmartCenter
IP address
of 172.16.1.
Is there a difference between how Nokia and SPLAT handle licence?
obviously, what works
with Nokia does not work with SPLAT, according to my observation.
Thanks.
cisco4ng
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
