topic Re: Ping not working for Newly installed SMS Server in General Topics

Ping not working for Newly installed SMS Server

gemechisd — Fri, 02 Feb 2024 06:50:39 GMT

I have installed checkpoint R81.10 SMS for test purpose on Nutanix AHV. Now I can access the installed SMS server through SSH & Browser. But can not able to ping or login through smart console.

Re: Ping not working for Newly installed SMS Server

Franktum — Fri, 02 Feb 2024 08:16:28 GMT

Hi,

If you have SSH you can launch tcpdump on SMS in order to see whether the ICMPs and SmartConsole traffic are arriving to the machine. In this way you can narrow down the problem.

Regards

Re: Ping not working for Newly installed SMS Server

gemechisd — Fri, 02 Feb 2024 13:04:52 GMT

@Franktum

I have captured any ping traffic using tcpdump on the Newly configured SMS Server. But the ping is not replying

Kindly, check the attached screenshot

Re: Ping not working for Newly installed SMS Server

HeikoAnkenbrand — Fri, 02 Feb 2024 14:31:12 GMT

1) I think this is a layer 2 problem. Can you see the MAC address?
# arp -an | grep 10.1.75.76

2) If the IP address 10.1.75.76 is a firewall module, a default security policy is installed as long as you have not yet installed a access policy. This means that you cannot ping the fw but you can uninstall the firewall policy and then you can ping the firewall.
# fw unloadlocal

Re: Ping not working for Newly installed SMS Server

the_rock — Fri, 02 Feb 2024 15:08:29 GMT

I agree with @HeikoAnkenbrand , you should check those things for sure.

Best,

Andy

Re: Ping not working for Newly installed SMS Server

Lesley — Fri, 02 Feb 2024 21:53:14 GMT

Machines seem to be in the same network and I see arp request and reply in the capture.

Are we sure mgmt has been installed and not gateway? What does cpstat mg output show?

Maybe check with cpconfig -> check GUI clients and option 8

Re: Ping not working for Newly installed SMS Server

the_rock — Sat, 03 Feb 2024 02:06:16 GMT

Very good point about running cpstat mg

Re: Ping not working for Newly installed SMS Server

Timothy_Hall — Sat, 03 Feb 2024 15:38:44 GMT

Run fw stat. If it says anything other than "Local Host is not a Firewall Module", you accidentally configured it as a standalone SMS/firewall, and the firewall default InitialPolicy is blocking your ping and SmartConsole connectivity. If this is the case you will need to reload and answer correctly with only "Management Server" during the first-time wizard.

Re: Ping not working for Newly installed SMS Server

the_rock — Sat, 03 Feb 2024 15:45:40 GMT

Definitely valid point.

Andy

Re: Ping not working for Newly installed SMS Server

gemechisd — Sun, 04 Feb 2024 04:38:09 GMT

@HeikoAnkenbrand

Thank you. It worked for me after executing the commands you have sent me.

Re: Ping not working for Newly installed SMS Server

gemechisd — Sun, 04 Feb 2024 04:45:32 GMT

@Timothy_Hall

The ping is working for me. But I can't able to login through Smart Console. Check the attached screenshot for fwstat

Our SMS in installed on nutanix AHV with .qcow2 file from checkpoint.

Re: Ping not working for Newly installed SMS Server

Chris_Atkinson — Sun, 04 Feb 2024 09:10:24 GMT

Which image / file from sk158292 did you use and which ftw selections were made?

Re: Ping not working for Newly installed SMS Server

Timothy_Hall — Mon, 05 Feb 2024 13:28:20 GMT

You have accidentally configured it as a Security Gateway as well as Security Management Server (standalone) as I guessed earlier. You need to reload and make sure that Security Gateway is unchecked during the first-time wizard.

Re: Ping not working for Newly installed SMS Server

the_rock — Mon, 05 Feb 2024 13:39:26 GMT

100% no doubt about it, you configured it as standalone (fw + mgmt as one machine)

If it was ONLY mgmt, it would show below.

Andy

[Expert@cpazuremgmt:0]# fw stat
Local host is not a FireWall-1 module
[Expert@cpazuremgmt:0]#