SUPPORT CENTER USER CENTER / PARTNER MAP CYBER TALK FOR EXECUTIVES MY ACCOUNT

PRODUCTS / SOLUTIONS SUPPORT / SERVICES PARTNERS COMPANY BLOG

Support Center > Search Results > SecureKnowledge Details

Search Support Center

WalkThrough Guide: IPSO Fresh Install

Rate This Email Print

Solution ID sk65343
Product IP Appliances
Version All
OS IPSO 4.x, IPSO 6.2
Platform / Model All
Date Created 19-Sep-2011
Last Modied 21-Sep-2016

Solution
How to install IPSO image from Boot Manager

This article will go through the steps of performing a new Install from the Boot Manager on a Check Point IP appliance rewall, running Check Point IPSO. IPSO 4.2 B069 is
used in this example. Outlined here are the steps and install clips that show the process.

Preliminary Steps

1. Download the IPSO Image from the Check Point Support website and place the Image on an FTP server that will be accessible to the Firewall.

2. Ensure you have Console access to the Firewall.

3. Determine: IP address/netmask, Default Gateway

Install procedure:

1. Boot into the Boot Manager.

2. When it prompts to press any key to enter the Boot Manager, press any key...

3. Run the install script.

4. Answer the prompts for the IP address and FTP server credentials.

5. Reboot.

6. Initial Conguration

Here are the details:

Starting bootmgr
Loading boot manager..
Boot manager loaded.
Entering autoboot mode.
Type any character to enter command mode.
BOOTMGR[1]> install

################### IPSO Full Installation ####################

You will need to supply the following information:
Client IP address/netmask, FTP server IP address and filename,
system serial number, and other license information.
This process will DESTROY any existing files and data on your disk.
#################################################################
Continue? (y/n) [n] y

Motherboard serial number is XXXXXXXXX.

The chassis serial number can be found on a

sticker on the back of the unit with the letters
S/N in front of the serial number.
Please enter the serial number: 12345678

Please answer the following licensing questions.

Will this node be using IGRP ? [y] n

Will this node be using BGP ? [y] n

Answer the prompts for the IP address/netmask, FTP server credentials, and the Default gateway information

1. Install from anonymous FTP server.

2. Install from FTP server with user and password.
Choose an installation method (1-2): 1
Enter IP address of this client (10.3.2.5/24): 10.3.2.9/24
Enter IP address of FTP server (0.0.0.0): 10.3.2.5
Enter IP address of the default gateway (0.0.0.0): 10.3.2.1

Choose an interface from the following list:

1) eth1
2) eth2
3) eth3
4) eth4
Enter a number [1-4]: 1

Choose interface speed from the following list:

1) 10 Mbit/sec
2) 100 Mbit/sec
Enter a number [1-2]: 2
Half or full duplex? [h/f] [h] f

Enter path to ipso image on FTP server [/]:

Enter ipso image filename on FTP server [ipso.tgz]:

1. Retrieve all valid packages, with no further prompting.

2. Retrieve packages one-by-one, prompting for each.
3. Retrieve no packages.
Enter choice [1-3] [1]: 3

Client IP address = 10.3.2.9/24

Server IP address = 10.3.2.5
Default gateway IP address = 10.3.2.1
Network Interface = eth1, speed = 100M, full-duplex
Server download path = [//]
Package install type = none
Mirror set creation = no

Are these values correct? [y] y

Note: If the rewall is able to contact the FTP server and nd the ipso.tgz image, proceed as follows:

Downloading compressed tarfile(s) from 10.3.2.5.

Hash mark printing on (1048576 bytes/hash mark).
Interactive mode off.
100% 36760 KB 00:00 ETA
Checking validity of image...done.
Installing image...done.
Image version tag: IPSO-4.2-BUILD069-10.27.2007-035617-1515.
Checking if bootmgr upgrade is needed...
Need to upgrade bootmgr. Proceeding..
Upgrading bootmgr....
new bootmgr size is 2097152
old bootmgr size is 1474560
Saving old bootmgr.
Installing new bootmgr.
Verifying installation of bootmgr.

Installation completed.

Reset system or hit <Enter> to reboot.

Reboot

Press Enter to reboot.

First Time Conguration

After rebooting the platform, you will be asked to perform the first time configuration of the unit. It will be as if received from
the Factory.

Please choose the host name for this system. This name will be used in messages and usually corresponds with one of the network
hostnames for the system. Note that only letters, numbers, dashes, and dots (.) are permitted in a hostname.
Hostname? harry
Hostname set to "harry", OK? [y] y

Please enter password for user admin:

Please re-enter password for confirmation:

You can configure your system in two ways:

1) configure an interface and use our Web-based Voyager via a remote

browser
2) configure an interface by using the CLI

Please enter a choice [ 1-2, q ]: 1

Select an interface from the following for configuration:

1) eth1
2) eth2
3) eth3
4) eth4
5) quit this menu

Enter choice [1-11]: 4

Enter the IP address to be used for eth4: 10.3.2.86

Enter the masklength: 24

Do you wish to set the default route [ y ] ? y

Enter the default router to use with eth4: 10.3.2.1

This interface is configured as 1000 mbs by default.

Do you wish to configure this interface for other speeds [ n ] ? n

You have entered the following parameters for the eth4 interface:

IP address: 10.3.2.86
masklength: 24
Default route: 10.3.2.1
Speed: 1000M
Duplex: full

Is this information correct [ y ] ? y

Do you want to configure Vlan for this interface[ n ] ?

You may now configure your interfaces with the Web-based Voyager by
typing in the IP address "10.3.2.86" at a remote browser.

This solution has been veried for the specic scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

Give us Feedback Please rate this document [1=Worst,5=Best]

Enter your comment here

Comment

1994-2017 Check Point Software Technologies Ltd. All rights reserved.

Copyright | Privacy Policy