topic Re: Command to show the number of permitted cores in Firewall and Security Management

Command to show the number of permitted cores

Danny — Mon, 20 Aug 2018 22:43:20 GMT

I'm looking for Bash command to show the number of permitted (licensed) cores of any Check Point GAiA system, even when CoreXL is not enabled.

Thanks in advance!

Re: Command to show the number of permitted cores

PhoneBoy — Tue, 21 Aug 2018 02:04:55 GMT

It’s encoded in the license string, which means cplic print -p should show it.

Re: Command to show the number of permitted cores

Danny — Tue, 21 Aug 2018 06:53:10 GMT

I created this one-liner:

case `cpstat os | grep "Appliance Name" | tr -s ' ' | cut -c17-21` in Check) grep -c ^processor /proc/cpuinfo;; *) cplic print -p 2>/dev/null | tr ' ' '\n' | grep fw1:6.0:mc_all_ | cut -c 16- | awk '{ sum += $1 } END { print sum }';; esac

and added it to our Common Check Point Commands (ccc) script.

Re: Command to show the number of permitted cores

_Val_ — Tue, 21 Aug 2018 08:24:26 GMT

Lol, was about to answer just that

Re: Command to show the number of permitted cores

PhoneBoy — Tue, 21 Aug 2018 13:20:04 GMT

On my system, the above command shows I am licensed for 16 cores, which I know to be false.

My system has two CPSG-CPSM-EVAL licenses, each of which contains 8 cores.

Also, one of the licenses is expired

Licensed cores are NOT additive, either.

Re: Command to show the number of permitted cores

JozkoMrkvicka — Tue, 21 Aug 2018 21:09:51 GMT

In case gateway is using "new" license string where some features cannot be found in cp.macro, it gives you following output:

[Expert@GWA:0]# cplic print -p | tr ' ' '\n' | grep fw1:6.0:mc_all_ | cut -c 16- | awk '{ sum += $1 } END { print sum }'
 Warning: Can't find ::CPSB-CTNT in cp.macro. License version might be not compatible
8
‍‍‍‍‍‍‍

Re: Command to show the number of permitted cores

_Val_ — Wed, 22 Aug 2018 08:42:44 GMT

Its okay, eval license might contain more features than known and supported with the version you use

Re: Command to show the number of permitted cores

Danny — Wed, 22 Aug 2018 15:12:56 GMT

Licensed cores are NOT additive?

What is this SmartUpdate message meaning then:

I added a 4-Core license to an 8-Core Eval license and are told to licensed for 12 cores now. This means licensed cores are additive, no?

Re: Command to show the number of permitted cores

PhoneBoy — Thu, 23 Aug 2018 13:36:37 GMT

Technically they're not supposed to be.

Re: Command to show the number of permitted cores

Danny — Thu, 23 Aug 2018 15:02:03 GMT

Well.. I can see CoreXL technically using all 12 cores.

Re: Command to show the number of permitted cores

_Val_ — Fri, 24 Aug 2018 06:17:49 GMT

might be just a glitch with eval license

Re: Command to show the number of permitted cores

Danny — Tue, 28 Aug 2018 09:10:32 GMT

I found another issue with my one-liner when SMT is enabled:

The license contains just a string for 8 cores. However, with SMT enabled 16 cores are shown on the system and CoreXL actively uses them. Looks like I need to advance my one-liner a little more.

Re: Command to show the number of permitted cores

Danny — Tue, 28 Aug 2018 09:19:47 GMT

Jozko Mrkvicka : Could you please try if the following command resolves the Warning message?

cplic print -p 2>/dev/null | tr ' ' '\n' | grep fw1:6.0:mc_all_ | cut -c 16- | awk '{ sum += $1 } END { print sum }'

Re: Command to show the number of permitted cores

Norbert_Bohusch — Tue, 28 Aug 2018 11:14:57 GMT

Technically this was the only way to license more than 8 cores before bigger core number came out

Re: Command to show the number of permitted cores

_Val_ — Tue, 28 Aug 2018 12:12:24 GMT

Did you try rebooting this system. Number of cores is checked during boot against the license. Any chance you have had eval and did not reboot after it expired?

Re: Command to show the number of permitted cores

JozkoMrkvicka — Tue, 28 Aug 2018 15:09:54 GMT

Hi Danny Jung‌,

Yes, it is solved now

[Expert@GWA:0]# cplic print -p 2>/dev/null | tr ' ' '\n' | grep fw1:6.0:mc_all_ | cut -c 16- | awk '{ sum += $1 } END { print sum }'
8
[Expert@GWA:0]#‍‍‍

You can update CCC with this updated syntax.

Thank you.

Re: Command to show the number of permitted cores

Danny — Wed, 29 Aug 2018 08:31:16 GMT

Added in version 3.3 of our Common Check Point Commands (ccc) script.

Re: Command to show the number of permitted cores

Henning_Gunders — Tue, 20 Nov 2018 23:26:56 GMT

Scripting is cool, but why not simplify it, by using the good old CLI command?

fw ctl get int fwlic_num_of_allowed_cores
fwlic_num_of_allowed_cores = 16

Re: Command to show the number of permitted cores

PhoneBoy — Tue, 20 Nov 2018 23:42:58 GMT

On my 1490, that command returns 100000

On my regular gateway (which runs the standard All-in-One eval), it returns 16.

Re: Command to show the number of permitted cores

_Val_ — Wed, 21 Nov 2018 07:27:22 GMT

100000 - that's the way to go