topic How to configure DHCP for PXE Booting in General Topics

How to configure DHCP for PXE Booting

hcampuzano — Wed, 30 Aug 2023 22:55:59 GMT

Is it possible to configure Checkpoint as DHCP server to forward PXE requests to a Distribution Point for Windows imaging?
The PXE server and the firewall are on the same subnet and the firewall is the DHCP server.
The new clients that request the image installation cannot communicate with the Distribution Point (PXE server) because the DHCP server (the firewall) is not sending the PXE requests.

Re: How to configure DHCP for PXE Booting

PhoneBoy — Thu, 31 Aug 2023 01:41:17 GMT

Sounds like this should be configured on the PXE server itself, not via DHCP.
See the following: https://techcommunity.microsoft.com/t5/configuration-manager-blog/you-want-to-pxe-boot-don-t-use-dhcp-options/ba-p/275562

Re: How to configure DHCP for PXE Booting

six — Tue, 16 Jan 2024 09:13:27 GMT

Checkpoints are useless at this - you have to go into the operating system files and manually edit them. https://askubuntu.com/questions/874648/setting-options-66-and-67-for-isc-dhcp-server

The fact there is no way of doing this from the management server or Gaia in 2024 is pretty damning.

Re: How to configure DHCP for PXE Booting

_Val_ — Tue, 16 Jan 2024 11:12:36 GMT

Hey @six, putting aside your unprofessional and disrespectful tone, are you aware that Gaia is not based on Ubuntu?

Re: How to configure DHCP for PXE Booting

six — Fri, 17 May 2024 13:16:30 GMT

Good afternoon. I am sorry you feel this is unprofessional but we all must accept that there are flaws with Check Point and this is one them. The solution I linked to is the correct fix for this issue - it's a Linux operating system so it doesn't matter if it's Ubuntu or Gaia.

Re: How to configure DHCP for PXE Booting

Bob_Zimmerman — Fri, 17 May 2024 14:37:41 GMT

Strictly, it can be done from the management server. A tool called cprid_util can be used to push files to, pull files from, or run arbitrary non-interactive commands on a firewall which reports to a given management. cprid_util can also be used via the /run-script Gaia API call.

Sure, it's less convenient than proper support for DHCP options in clish and via the Gaia API would be, but it's at least possible.

I do wish Check Point would give up on clish. I understand the goal: it's nice to have a single "configuration" rather than state spread across dozens of files. Greatly simplifies change management, auditing, and so on. It just doesn't work well. It's consistently the worst part of interacting with a firewall or management server. Useless for troubleshooting (no pipes for grep, awk, etc.; no loop constructs; no file I/O), incredibly irritating on VSX, there's all kinds of missing functionality like the ability to set DHCP options. And it's more than a little ridiculous that Check Point's own article on using DHCP options (sk92473) acknowledges that clish will muck up this config so you need to set the immutable flag to prevent it from undoing your work.