- Products
- Learn
- Local User Groups
- Partners
- More
CheckMates Fifth Birthday
Celebrate with Us!
days
hours
minutes
seconds
Join the CHECKMATES Everywhere Competition
Submit your picture to win!
Check Point Proactive support
Free trial available for 90 Days!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
The 2022 MITRE Engenuity ATT&CK®
Evaluations Results Are In!
Now Available: SmartAwareness Security Training
Training Built to Educate and Engage
MITRE ATT&CK
Inside Check Point products!
CheckFlix!
All Videos In One Space
Hello everyone,
I have a task to upgrade a firewall appliance from 1GB to 10GB on their interfaces. The issue I have is this appliance is running r75.30 on SPLAT. I haven't used SPLAT in a very long time. Does anyone know what the commands even are to do this?
Another question is what is the SPLAT command to get the configuration of the appliance. In GAIA its simply show configuration. Don't know what the command is in SPLAT.
Any help is appreciated. Thanks.
Regards!
Hi @JosephAviles,
Now to your questions:
The Splat config files:
$FWDIR/boot/modules/fwkern.conf -> Firewall settings
$FWDIR/conf/local.arp -> Proxyarp
$FWDIR/conf/discntd.if -> Disconnected Interface
/etc/sysconfig/ethtab -> eth to MAC
/eth/sysconfig/netconf.C -> FW interface und routes
/eth/sysconfig/dhcpd -> DHCP server.
/etc/dhcpd.conf -> DHCP Server
/etc/sysconfig/dhcrelay -> DHCP relaying
/etc/sysctl.conf -> Linux settings
Set interface speed and duplex for example 100/FULL:
# ethtool –s eth0 speed 100 duplex full autoneg off
# ifconnfig --save
Upgrade your appliance to R80.30 JHF 19 with the converter tool (SK68140):
Migration from SecurePlatform OS to Gaia OS
I believe the menu you want is sysconfig on SPLAT. I think that menu allowed you to configure things like DNS, Routing, and Physical Interfaces.
Does SPLAT actually have proper driver support for 10GB NICs?
Check this out: https://firewallengineer.wordpress.com/2012/04/09/cpconfig-vs-sysconfig-menu-in-check-point-splat/
Thanks for all of the input. I know that the OS has been out of support for years. The customer has a immediate need to change this and when I first arrived here at this location the 10G modules were installed in the appliance already. I've assumed since the 10G modules were already installed that the drivers are good. (old but good) This is a very temporary fix because they are planning on replacing these appliances. However the need for the 10G upgrade is a bit more immediate. I hadn't used SPLAT in a long time so I don't remember most of the commands. I'm going to do a netstat -rn to get the routes and probably log in to the GUI to see what installed there as well.
Thanks again everyone for the input. Now to try and convince my customer to get new appliances. 🙂
R75.30 is out of support for years:-)
Hi @JosephAviles,
Now to your questions:
The Splat config files:
$FWDIR/boot/modules/fwkern.conf -> Firewall settings
$FWDIR/conf/local.arp -> Proxyarp
$FWDIR/conf/discntd.if -> Disconnected Interface
/etc/sysconfig/ethtab -> eth to MAC
/eth/sysconfig/netconf.C -> FW interface und routes
/eth/sysconfig/dhcpd -> DHCP server.
/etc/dhcpd.conf -> DHCP Server
/etc/sysconfig/dhcrelay -> DHCP relaying
/etc/sysctl.conf -> Linux settings
Set interface speed and duplex for example 100/FULL:
# ethtool –s eth0 speed 100 duplex full autoneg off
# ifconnfig --save
Upgrade your appliance to R80.30 JHF 19 with the converter tool (SK68140):
Migration from SecurePlatform OS to Gaia OS
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY