Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Danny
Champion Champion
Champion
Jump to solution

Command to show the number of permitted cores

I'm looking for Bash command to show the number of permitted (licensed) cores of any Check Point GAiA system, even when CoreXL is not enabled.

Thanks in advance!

2 Solutions

Accepted Solutions
Danny
Champion Champion
Champion

I created this one-liner:

case `cpstat os | grep "Appliance Name" | tr -s ' ' | cut -c17-21` in Check) grep -c ^processor /proc/cpuinfo;; *) cplic print -p 2>/dev/null | tr ' ' '\n' | grep fw1:6.0:mc_all_ | cut -c 16- | awk '{ sum += $1 } END { print sum }';; esac

and added it to our Common Check Point Commands (ccc) script.

View solution in original post

Henning_Gunders
Participant

Scripting is cool, but why not simplify it, by using the good old CLI command?

fw ctl get int fwlic_num_of_allowed_cores
fwlic_num_of_allowed_cores = 16

View solution in original post

20 Replies
PhoneBoy
Admin
Admin

It’s encoded in the license string, which means cplic print -p should show it.

Danny
Champion Champion
Champion

I created this one-liner:

case `cpstat os | grep "Appliance Name" | tr -s ' ' | cut -c17-21` in Check) grep -c ^processor /proc/cpuinfo;; *) cplic print -p 2>/dev/null | tr ' ' '\n' | grep fw1:6.0:mc_all_ | cut -c 16- | awk '{ sum += $1 } END { print sum }';; esac

and added it to our Common Check Point Commands (ccc) script.

PhoneBoy
Admin
Admin

On my system, the above command shows I am licensed for 16 cores, which I know to be false.

My system has two CPSG-CPSM-EVAL licenses, each of which contains 8 cores.

Also, one of the licenses is expired Smiley Happy

Licensed cores are NOT additive, either.

0 Kudos
Danny
Champion Champion
Champion

Licensed cores are NOT additive?

What is this SmartUpdate message meaning then:

I added a 4-Core license to an 8-Core Eval license and are told to licensed for 12 cores now. This means licensed cores are additive, no?

0 Kudos
PhoneBoy
Admin
Admin

Technically they're not supposed to be. Smiley Happy

0 Kudos
Danny
Champion Champion
Champion

Well.. I can see CoreXL technically using all 12 cores.

0 Kudos
_Val_
Admin
Admin

might be just a glitch with eval license

0 Kudos
JonasNyquist
Participant

The Eval licenses has been "stackable" for a long time, actually.
I'm not 100 percent sure if that is also true for Production licenses, because I have never had any "proper" licenses to play around with... ;-), but I have seen in the "License String" of "Production" licenses that they have 2 x CPSG-C8-U in the beginning so I would think that you might be able to "stack" production licenses as well. I will update after I have tested that as well...  🙂

That said, just because you CAN do it doesn't mean that is is in fact allowed by the EULA/License rules...

0 Kudos
Norbert_Bohusch
Advisor

Technically this was the only way to license more than 8 cores before bigger core number came out Smiley Happy

0 Kudos
Danny
Champion Champion
Champion

I found another issue with my one-liner when SMT is enabled:

The license contains just a string for 8 cores. However, with SMT enabled 16 cores are shown on the system and CoreXL actively uses them. Looks like I need to advance my one-liner a little more.

_Val_
Admin
Admin

Did you try rebooting this system. Number of cores is checked during boot against the license. Any chance you have had eval and did not reboot after it expired?

0 Kudos
JozkoMrkvicka
Mentor
Mentor

In case gateway is using "new" license string where some features cannot be found in cp.macro, it gives you following output:

[Expert@GWA:0]# cplic print -p | tr ' ' '\n' | grep fw1:6.0:mc_all_ | cut -c 16- | awk '{ sum += $1 } END { print sum }'
Warning: Can't find ::CPSB-CTNT in cp.macro. License version might be not compatible
8
‍‍‍
Kind regards,
Jozko Mrkvicka
0 Kudos
_Val_
Admin
Admin

Its okay, eval license might contain more features than known and supported with the version you use

0 Kudos
Danny
Champion Champion
Champion

Jozko Mrkvicka : Could you please try if the following command resolves the Warning message?

cplic print -p 2>/dev/null | tr ' ' '\n' | grep fw1:6.0:mc_all_ | cut -c 16- | awk '{ sum += $1 } END { print sum }'
JozkoMrkvicka
Mentor
Mentor

Hi Danny Jung‌,

Yes, it is solved now Smiley Happy

[Expert@GWA:0]# cplic print -p 2>/dev/null | tr ' ' '\n' | grep fw1:6.0:mc_all_ | cut -c 16- | awk '{ sum += $1 } END { print sum }'
8
[Expert@GWA:0]#

You can update CCC with this updated syntax.

Thank you.

Kind regards,
Jozko Mrkvicka
0 Kudos
Danny
Champion Champion
Champion

Added in version 3.3 of our Common Check Point Commands (ccc) script.

_Val_
Admin
Admin

Lol, was about to answer just that

Henning_Gunders
Participant

Scripting is cool, but why not simplify it, by using the good old CLI command?

fw ctl get int fwlic_num_of_allowed_cores
fwlic_num_of_allowed_cores = 16

PhoneBoy
Admin
Admin

On my 1490, that command returns 100000 Smiley Happy

On my regular gateway (which runs the standard All-in-One eval), it returns 16.

_Val_
Admin
Admin

100000 - that's the way to go

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events