Members Login
Username 
 
Password 
    Remember Me  
FireWall-1 Gurus Forum -> FireWall-1 Gurus Forum -> No Valid FM License after Cluster IP change
Post Info TOPIC: No Valid FM License after Cluster IP change
20100


Status: Offline
Posts: 13
Date:
No Valid FM License after Cluster IP change
Permalink  

Hi,


While we are running 4.1 live, I have been testing in parallel our new firewall solution that consists of 2 SecurePlatform running NG R55 for the gateways and 1 W2K NG R55 for the management server. We are licensed for Checkpoint Express + HA Failover. I licensed everthing against the IP of the Management Server. I have been able to install everything OK, setup the cluster, and test everything fine.


 


Untill...


I decided to go live!


I turned off the old firewall, and changed the (virtual) IP of the cluster to be the same as external IP address of the old firewall, and also changed the Ip address of all cluster interfaces in Topology.


When I tried to install the policy, it failed telling me that there was no licenses on the firewalls.


I stop and restarted both gateways, but I would also come with "No valid FM license".


 


I put back the original IP addresses of the cluster, but I still could not install policies anymore!


I detached and deleted all licenses in Smartupdate and re-added and re-attached, same problem.


I re-imported all the settings from by last good upgrade_export command, but still the same problem.


 


I am running now back with my old firewall.


 


As anyone any idea?


Thanks a lot!


PS] Copy of my cplic print -p


10.64.2.29       never       ::CK-BE093080DA1D fw1:5.0:srunlimit fw1:5.0:spcps n
etso:5.0:netsounlimit fw1:5.0:spcc25 fw1:5.0:sr25 fw1:5.0:spc
 
10.64.2.29       never       ::CK-E501E89DFFDC fw1:5.0:cpxmgmt fw1:5.0:cluster-u
 fw1:5.0:remote2 fw1:5.0:remote1 fw1:5.0:aes fw1:5.0:strong fw1:5.0:rdp fw1:5.0:
des fw1:5.0:isakmp fw1:5.0:ca fw1:5.0:cluster-u fw1:5.0:dbvr_unlimit fw1:5.0:cmp
mgmt fw1:5.0:rtmmgmt fw1:5.0:fgmgmt fw1:5.0:rtmui fw1:5.0:sstui fw1:5.0:fwlv fw1
:5.0:ui fw1:5.0:filter fw1:5.0:fwc fw1:5.0:cmd
 
10.64.2.29       never       ::CK-BE093080DA1D fw1:5.0:srunlimit fw1:5.0:spcps
 
10.64.2.29       never       ::CK-EDE176333FF2 fw1:5.0:srunlimit fw1:5.0:spcps F
W1:5.0:HFM fw1:5.0:sr25 fw1:5.0:spcps fw1:5.0:pam fw1:5.0:enchosts100 fw1:5.0:en
cryption fw1:5.0:aes fw1:5.0:strong fw1:5.0:rdp fw1:5.0:des fw1:5.0:isakmp fw1:5
.0:hosts100 fw1:5.0:content fw1:5.0:auth fw1:5.0:xlate fw1:5.0:sxl_vpn fw1:5.0:s
xl_fw fw1:5.0:sync fw1:5.0:fm
 
10.64.2.29       never       ::CK-E501E89DFFDC fw1:5.0:cpx fw1:5.0:sr25 fw1:5.0:
spcps fw1:5.0:pam fw1:5.0:enchosts100 fw1:5.0:encryption fw1:5.0:aes fw1:5.0:str
ong fw1:5.0:rdp fw1:5.0:des fw1:5.0:isakmp fw1:5.0:hosts100 fw1:5.0:content fw1:
5.0:auth fw1:5.0:xlate fw1:5.0:sxl_vpn fw1:5.0:sxl_fw fw1:5.0:sync fw1:5.0:fm

 



__________________
Page 1 of 1  sorted by
 
Quick Reply

Please log in to post quick replies.
FireWall-1 Gurus Forum -> FireWall-1 Gurus Forum -> No Valid FM License after Cluster IP change
Tweet this page Post to Digg Post to Del.icio.us


Create your own FREE Forum
Report Abuse 		Powered by ActiveBoard