cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post

Lab environment - no valid license

Jump to solution

Hi,

I've built up a lab-environment on my laptop to get in touch with the checkpoint features (1 mgmt, 2 sec-gateways as cluster)
I used eval-licenses and created them with " ALL-IN-ONE EVALUATION".

I installed the licenses by using smart update to my both cluster nodes (1 license each, the management IPs are matching)

Now I try to install a policy to the cluster, but the installation fails because of "no valid licenses".

The monitor shows that the firewall module on both nodes has no license. I can verify from cli, smart update etc. that these modules are licensed: 

CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150

What do I miss?

I already rebooted both nodes.

I'm really thankful about any reply.

Best Regards

Tags (2)
1 Solution

Accepted Solutions

Re: Lab environment - no valid license

Jump to solution

ALL-IN-ONE EVALUATION gives you two licenses with central licensing that can be installed using SmartUpdate. The license you list above is the SMS part of the license. For the Module, you have also received a second license part looking like this:

Run 'cplic put [module name] <SMS IP> <date> <lic key> cpsg-c-8-u cpsb-fw cpsb-vpn cpsb-ipsa cpsb-dlp cpsb-sslvpn-u cpsb-ia cpsb-adnc cpsg-vsx-25s cpsb-swb cpsb-ips cpsb-av cpsb-urlf cpsb-aspm cpsb-apcl cpsb-abot cpsb-ctnt CK-............'

Validation Code:..............

The easy way is to just import the received license file; the SMS part will be attached automatically, but you have to attach the GW lic manually to one the cluster nodes! I think this is missing here.

And what else is missing ? The All In One is just for one GW and one SMS - for Cluster deployment, you have to generate another demo licanse, either a second All I One or a GW only license.

0 Kudos
4 Replies

Re: Lab environment - no valid license

Jump to solution

Hallo Johannes,

you need a license for a Security gateway CPSG

Do not take the All-In-One Security Bundle, but All-In-One Security Gateway.

It has to look like this:

Host Expiration Features
192.168.1.1 5May2018 CPSG-C-8-U CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CK-6EC6B741

Re: Lab environment - no valid license

Jump to solution

ALL-IN-ONE EVALUATION gives you two licenses with central licensing that can be installed using SmartUpdate. The license you list above is the SMS part of the license. For the Module, you have also received a second license part looking like this:

Run 'cplic put [module name] <SMS IP> <date> <lic key> cpsg-c-8-u cpsb-fw cpsb-vpn cpsb-ipsa cpsb-dlp cpsb-sslvpn-u cpsb-ia cpsb-adnc cpsg-vsx-25s cpsb-swb cpsb-ips cpsb-av cpsb-urlf cpsb-aspm cpsb-apcl cpsb-abot cpsb-ctnt CK-............'

Validation Code:..............

The easy way is to just import the received license file; the SMS part will be attached automatically, but you have to attach the GW lic manually to one the cluster nodes! I think this is missing here.

And what else is missing ? The All In One is just for one GW and one SMS - for Cluster deployment, you have to generate another demo licanse, either a second All I One or a GW only license.

0 Kudos

Re: Lab environment - no valid license

Jump to solution

Many thanks for your help - now it's working Smiley Happy

Good to know that a few license parts needs to be assigned manually  - I thought to avoid this the IP addresses are requested during the license creation process

0 Kudos

Re: Lab environment - no valid license

Jump to solution

You just have to look into SmartUpdate, left side - you can see the licenses as Attached or Unattached. To get all services correctly, it mostly makes sense to update the contract file from UserCenter.

0 Kudos