How to change IP Address in Check Point firewall

To view IP Address information in Linux/UNIX, use ifconfig (F) command. It’s slightly different from Microsoft whereby ipconfig (P) command is used.

[R60-FW]# ifconfig

To change the IP Address, use the following command

ifconfig eth0 192.168.10.254 netmask 255.255.255.0 up

Again, use ifconfig command to verify it.

Even though we can change the IP Address of Check Point firewall by using this way, but it’s not advisable. I’m not sure the reason behind this, but I’m sure an expert from CPUG can answer this question. But I notice there is error message triggered if we change the ip using this method.

Ifconfig is a temporary solution to change the ip address in the firewall. Once you’ve rebooted the firewall, it will be changed to the old ip address.

So, the best way to change IP Address of Check Point firewall permanently is by using sysconfig command:

[Expert@R60-FW]# sysconfig

Choose menu 5) Network Connections

    Choose a configuration item (‘e’ to exit):
——————————————————————
1) Host name                    7) DHCP Server Configuration
2) Domain name                  8) DHCP Relay Configuration
3) Domain name servers          9) Export Setup
4) Time and Date               10) Products Installation
5) Network Connections         11) Products Configuration
6) Routing
——————————————————————
(Note: configuration changes are automatically saved)
Your choice:5

2) Configure connection

    Choose a network connections configuration item (‘e’ to exit):
——————————————————————
1) Add new connection             4) Select management connection
2) Configure connection           5) Show connection configuration
3) Remove connection
——————————————————————
(Note: configuration changes are automatically saved)
Your choice:2

1) eth0

    Choose a connection to configure (‘e’ to exit):
——————————————————————
1) eth0
2) eth1
3) eth2
——————————————————————
(Note: configuration changes are automatically saved)
Your choice: 1

1) Change IP settings

    Choose eth0 item to configure (‘e’ to exit):
——————————————————————
1) Change IP settings                3) Remove IP from interface
2) Change MTU settings               4) Change from static to dynamic IP
——————————————————————
(Note: configuration changes are automatically saved)
Your choice: 1

[Lab] Check Point R60 in GNS3 & VirtualBox

Last week, I’ve had a chance to configure a Check Point SecurePlatform (SPLAT) R60. During the installation process, I was experiencing with a few problems such as:

1. Input/output error during read on /tmp/hde
2. Web browser compatibility issue
3. Partitioning failed: Could not allocate partitions

Luckily, I’ve managed to sort it and documented the solution on the link above. Today, I’ll share how I configure it in my virtual lab for learning purposes. Below is the network diagram for R60 my lab.

First of all, please make sure that you’ve powered off all devices related to the GNS3 diagram above. If any of these devices are in “turn on and in save mode”, you’ll find that they can’t be turned on at all.

Then, make sure all IP addresses configured correctly in all devices. For R60 setup, you need at least 2 network card enabled and configured. In this lab, I have 3 NIC enabled and I’m having a problem to identify which one is connected to the client and which one is connected to the server.

Do “ifconfig” command in R60 box to find out IP & MAC address on it’s NICs. Then, you need to check it on VirtualBox network settings.

Ping each other to make sure the route is in place and working.

On the first ping test attempt, you’ll able to ping all interfaces below except for server (192.168.100.10). Then, I realized that Check Point is actually blocking all network traffic by default including the ping attempt.

Therefore, I’ve created a simple rule to allow all traffic, verify & install policies.

Once I’ve completed all this, I did similar ping test to the server and able to get a reply. That’s it for today. I’m too lazy to capture all the screenshots for this lab. Please let me know if you have any questions on comment section below.

[solved] Check Point SPLAT: Partitioning failed: Could not allocate partitions

I’ve had another chance to configure Check Point SPLAT R65 today. As usual, I’ve fire up my favorite free virtualization software which is VirtualBox. I’ve created a new virtual machine and use a default setting which is 8GB hard disk space. Guess what happened. It turns out that 8GB is not enough for R65, and the following error message appear:

Partitioning failed: Could not allocate partitions

The available disk space is not sufficient to create all requested partitions

Press OK to reboot your system

I did a quick check on Check Point website and found that the minimum disk space required is 10GB. Therefore, I’ve changed it from 8GB to 10GB and was able to install it successfully.

REFERENCE

http://www.checkpoint.com/ngx/upgrade/requirements/r65.html

How to install Check Point SecurePlatform (SPLAT)?

It’s pretty easy to install Check Point SecurePlatform (SPLAT) even for a beginner. The only things you need to do is the right Check Point SPLAT image.

Please find below 3 great series of tutorial from SysAdminTutorials.com with screenshots and you’ll find how easy it is.

How to install Check Point R75 SecurePlatform Part 1

How to install Check Point R75 SecurePlatform Part 2

How to install Check Point R75 SecurePlatform Part 3

Check Point R75 Cluster Setup

Other tutorials that you can find on the internet are:

How to Install Checkpoint Firewall NGX on SecurePlatform:

Check Point – Installing an HFA

Check Point Firewall Virtual Setup