1GB to 10GB interface upgrade

[JosephAviles]

Hello everyone,

I have a task to upgrade a firewall appliance from 1GB to 10GB on their interfaces. The issue I  have is this appliance is running r75.30 on SPLAT. I haven't used SPLAT in a very long time. Does anyone know what the commands even are to do this? 

Another question is what is the SPLAT command to get the configuration of the appliance. In GAIA its simply show configuration. Don't know what the command is in SPLAT.

Any help is appreciated. Thanks. 

Regards!

[Daniel_Taney]

I believe the menu you want is sysconfig on SPLAT. I think that menu allowed you to configure things like DNS, Routing, and Physical Interfaces.

Does SPLAT actually have proper driver support for 10GB NICs?

Check this out: https://firewallengineer.wordpress.com/2012/04/09/cpconfig-vs-sysconfig-menu-in-check-point-splat/

[PhoneBoy]

Are you sure the physical interfaces actually support 10GB?

[JosephAviles]

Thanks for all of the input. I know that the OS has been out of support for years. The customer has a immediate need to change this and when I first arrived here at this location the 10G modules were installed in the appliance already. I've assumed since the 10G modules were already installed that the drivers are good. (old but good)  This is a very temporary fix because they are planning on replacing these appliances. However the need for the 10G upgrade is a bit more immediate. I hadn't used SPLAT in a long time so I don't remember most of the commands. I'm going to do a netstat -rn to get the routes and probably log in to the GUI to see what installed there as well. 

Thanks again everyone for the input. Now to try and convince my customer to get new appliances. 🙂

[HeikoAnkenbrand]

R75.30 is out of support for years:-)

[HeikoAnkenbrand · Accepted solution]

Hi @JosephAviles,

Now to your questions:

The Splat config files:

$FWDIR/boot/modules/fwkern.conf  -> Firewall settings

$FWDIR/conf/local.arp                        -> Proxyarp

$FWDIR/conf/discntd.if                       -> Disconnected Interface

/etc/sysconfig/ethtab                           -> eth to MAC

/eth/sysconfig/netconf.C                      -> FW interface und routes

/eth/sysconfig/dhcpd                            -> DHCP server.

/etc/dhcpd.conf                                      -> DHCP Server

/etc/sysconfig/dhcrelay                         -> DHCP relaying

/etc/sysctl.conf                                       -> Linux settings

Set interface speed and duplex for example 100/FULL:

# ethtool –s eth0 speed 100 duplex full autoneg off

# ifconnfig --save

Upgrade your appliance to R80.30 JHF 19 with the converter tool (SK68140):

Migration from SecurePlatform OS to Gaia OS