topic Re: Can't Install R82 on VMware 6.7 in Firewall and Security Management

Can't Install R82 on VMware 6.7

stallwoodj — Fri, 01 Nov 2024 13:56:40 GMT

Hi,

I've just completed the FTW for a build of R82 T777 on my ESXi 6.7 machine, and now the firewall just crashes on boot. Same messages going round and round.

The VM has 8GB and 6 CPU's, with 4 NICs with OS type "Other 4.x 64-bit". The guest was configured to be an ElasticXL cluster member running vsnext.

A build of R82 to be a primary manager worked just fine. Any help appreciated 🙂

Thanks

Jamie

Re: Can't Install R82 on VMware 6.7

the_rock — Fri, 01 Nov 2024 14:42:48 GMT

Can you change the nic type as below? I know this is eve-ng, but not sure if same option can be set in vmware.

Andy

Re: Can't Install R82 on VMware 6.7

stallwoodj — Fri, 01 Nov 2024 14:49:15 GMT

Hi Andy,

NICs are already vmxnet3, have attached the settings spec.

Re: Can't Install R82 on VMware 6.7

the_rock — Fri, 01 Nov 2024 14:53:13 GMT

I remember once I had similar issue with vmware and had to change controller type. We got rid of vmware, as we found eve-ng is so much better, so dont sadly ability to test this for you, sorry : - (

Andy

Re: Can't Install R82 on VMware 6.7

PhoneBoy — Fri, 01 Nov 2024 15:24:21 GMT

You should be specifying RHEL 8.x as the VM type, I believe.

Re: Can't Install R82 on VMware 6.7

PhoneBoy — Fri, 01 Nov 2024 15:32:23 GMT

Funny enough, I just switched my internal lab to Promox from VMware ESXi 7 🙂
Since I had to do the switch on the same hardware, I converted the VMs to qcow2 and tested them on a different system running KVM.
It's all...a bit different, but at least the underlying Linux is actually usable and a whole lot easier to upgrade than VMware. 🙂

Re: Can't Install R82 on VMware 6.7

the_rock — Fri, 01 Nov 2024 15:59:52 GMT

Totally agree!

Btw, @stallwoodj

See if below video helps. I know its R80.40, but worth checking out the settings.

Andy

https://community.checkpoint.com/t5/Management/How-to-install-check-point-mgmt-in-vmware-workstation/td-p/94171

Re: Can't Install R82 on VMware 6.7

stallwoodj — Fri, 01 Nov 2024 16:03:01 GMT

Hi Dameon,

Tried that, still getting the same error on boot.

Re: Can't Install R82 on VMware 6.7

JozkoMrkvicka — Fri, 01 Nov 2024 22:48:11 GMT

According to the R82 Release Notes, ElasticXL is NOT supported on Open Servers. ElasticXL Cluster supports only Check Point appliances that have the dedicated ports called "Mgmt" and "Sync".

According to the R82 Release Notes, VSNext is NOT supported on Open Servers.

Why it is even possible to select these options on VM during FTW, is another question...

Re: Can't Install R82 on VMware 6.7

the_rock — Fri, 01 Nov 2024 23:17:19 GMT

Great point. I totally overlooked the fact it was elasticxl in the description.

Andy

Re: Can't Install R82 on VMware 6.7

the_rock — Sat, 02 Nov 2024 00:54:43 GMT

Hey @stallwoodj

I dug a little further about previous posts made about elastic xl and found below, but not sure it might be useful here, since I made post asking about sync issue with elasticxl in eve-ng, but you can check out what @shais gave as a solution, though if your vm is not even booting up, cant even check it. Let me see if there are any colleagues that can possibly test this somehow on vmware.

Andy

https://community.checkpoint.com/t5/Security-Gateways/R82-elasticXL-lab/m-p/220708/emcs_t/S2h8ZW1haWx8dG9waWNfc3Vic2NyaXB0aW9ufExZTTFUTFZPSjA0QVBHfDIyMDcwOHxTVUJTQ1JJUFRJT05TfGhL#M42244

Also, maybe below may help, if there is a setting for promiscuous mode in vmware, you may want to disable it.

https://community.checkpoint.com/t5/Security-Gateways/R82-lab-with-ElasticXL/m-p/219578#M41986

Re: Can't Install R82 on VMware 6.7

Niels_van_Sluis — Sat, 02 Nov 2024 14:13:31 GMT

Maybe it's not supported. But it seems to be working on ESXi 8.0 Update 2. I've used the following configuration:

CPU: 2vCPUs
Memory: 16GB
Hard disk 1: 110GB
SCSI Controller 0: LSI Logic SAS
3x Network adapter: VMXNET 3

First installation failed. The security gateway didn't start. Messages about 'ckp: Loading FW-1 IPv4 Instance 0: failed'. Then I started with the config above.

Re: Can't Install R82 on VMware 6.7

the_rock — Sat, 02 Nov 2024 14:13:32 GMT

Im sure these things can be done and workaround applied, but then again, I would never encourage anyone doing it in production, specially if official vendor document states its not supported.

Andy

Re: Can't Install R82 on VMware 6.7

Niels_van_Sluis — Sat, 02 Nov 2024 14:17:05 GMT

I agree, I wouldn't run it in production. But it sure helps if these new features can be run in my home lab.

Re: Can't Install R82 on VMware 6.7

the_rock — Sat, 02 Nov 2024 14:17:44 GMT

100%

Re: Can't Install R82 on VMware 6.7

ShaiF — Sun, 03 Nov 2024 06:35:59 GMT

Hi @stallwoodj ,

ElasticXL/VSNext is not supported officially for production.

BUT We do encourage using VMs for it on Labs for demos/training/playing....

In most cases installing on VMs should work out of the box.

I guess you have some specific issue related to your ESX. If you did not manage to overcome it you can send me private message and i can try assist.

Regards,

Shai.

Re: Can't Install R82 on VMware 6.7

PhoneBoy — Mon, 04 Nov 2024 14:23:08 GMT

I believe the plan is to support these options in a JHF.
Meanwhile, for lab purposes, you can likely make this work.