topic Re: 1GB to 10GB interface upgrade in General Topics

1GB to 10GB interface upgrade

JosephAviles — Fri, 13 Sep 2019 15:12:00 GMT

Hello everyone,

I have a task to upgrade a firewall appliance from 1GB to 10GB on their interfaces. The issue I have is this appliance is running r75.30 on SPLAT. I haven't used SPLAT in a very long time. Does anyone know what the commands even are to do this?

Another question is what is the SPLAT command to get the configuration of the appliance. In GAIA its simply show configuration. Don't know what the command is in SPLAT.

Any help is appreciated. Thanks.

Regards!

Re: 1GB to 10GB interface upgrade

Daniel_Taney — Fri, 13 Sep 2019 20:34:01 GMT

I believe the menu you want is sysconfig on SPLAT. I think that menu allowed you to configure things like DNS, Routing, and Physical Interfaces.

Does SPLAT actually have proper driver support for 10GB NICs?

Check this out: https://firewallengineer.wordpress.com/2012/04/09/cpconfig-vs-sysconfig-menu-in-check-point-splat/

Re: 1GB to 10GB interface upgrade

PhoneBoy — Sat, 14 Sep 2019 01:37:27 GMT

Are you sure the physical interfaces actually support 10GB?

Re: 1GB to 10GB interface upgrade

HeikoAnkenbrand — Sat, 14 Sep 2019 05:35:19 GMT

R75.30 is out of support for years:-)

Re: 1GB to 10GB interface upgrade

HeikoAnkenbrand — Sat, 14 Sep 2019 05:49:35 GMT

Hi @JosephAviles,

Now to your questions:

The Splat config files:

$FWDIR/boot/modules/fwkern.conf -> Firewall settings

$FWDIR/conf/local.arp -> Proxyarp

$FWDIR/conf/discntd.if -> Disconnected Interface

/etc/sysconfig/ethtab -> eth to MAC

/eth/sysconfig/netconf.C -> FW interface und routes

/eth/sysconfig/dhcpd -> DHCP server.

/etc/dhcpd.conf -> DHCP Server

/etc/sysconfig/dhcrelay -> DHCP relaying

/etc/sysctl.conf -> Linux settings

Set interface speed and duplex for example 100/FULL:

# ethtool –s eth0 speed 100 duplex full autoneg off

# ifconnfig --save

Upgrade your appliance to R80.30 JHF 19 with the converter tool (SK68140):

Migration from SecurePlatform OS to Gaia OS

Re: 1GB to 10GB interface upgrade

JosephAviles — Mon, 16 Sep 2019 13:06:56 GMT

Thanks for all of the input. I know that the OS has been out of support for years. The customer has a immediate need to change this and when I first arrived here at this location the 10G modules were installed in the appliance already. I've assumed since the 10G modules were already installed that the drivers are good. (old but good) This is a very temporary fix because they are planning on replacing these appliances. However the need for the 10G upgrade is a bit more immediate. I hadn't used SPLAT in a long time so I don't remember most of the commands. I'm going to do a netstat -rn to get the routes and probably log in to the GUI to see what installed there as well.

Thanks again everyone for the input. Now to try and convince my customer to get new appliances. 🙂