LAB Setup Help

[Aman_Choubey]

Hi team,

I am trying to set up a lab using VMware-12,

but I am stuck on a step please help me to complete the Setup.

thanks in advance.

[PhoneBoy]

Many of us run Check Point in VMware (either ESX or VMware Workstation), so it's definitely possible.

What exactly are you try to achieve/build in detail?

What steps did you take to do this?

What were the results of those steps?
The more details you provide (with screen shots, error message, etc), the more we can help you.

[Aman_Choubey]

Hi Dameon,

thanks for the Response,

Actually, I am trying to set up a Checkpoint lab on Vmware-work station pro-12 and I am using the Checkpoint IOS image- R77.30. 

So simple I have created the Virtual Machine and I put that ios image on it and I have done the set-up.I have given the management IP- 192.168.1.1 at the time of installation.

then I am accessing that management IP from the web- Https:// 192.168.1.1

then after admin credential is asking after login asking for the connection.

I am stuck on that step for which I have provided the screenshot, I am trying to perform the First time Wizard.

please help.

thanks in advance.

[PhoneBoy]

You are very likely experiencing the issue described here: https://community.checkpoint.com/message/14066-connection-cannot-be-initiated-please-make-sure?sr=se...‌

[R89_99]

I think Dameon described this well in the link above. It think alsow it is the 20 years problem with the certificate.

Solution:

- login per ssh

- set expert password

     > set expert password xyz

- set bash for user admin for winscp connect

- login in expert mode

- upload newest CPUSE  tool  (sk92449) per winscp 

- install newest CPUSE tool per cli

       # tar -zxvf DeploymentAgent_<build>.tgz

       # rpm -Uhv --force CPda-00-00.i386.rpm

- upload newest hotfix per winscp 

- install newest r77.30 hotfix (SK106162) per clish

        > installer import local  <Path>/<Package_File_Name>

        > installer install <Package_Number>

- reboot 

- start „first configuration wizard“

Regards

Heiko

[R89_99]

I have added the CLI commands.

[Vladimir]

Your problem is the use of the 192.168.1.1 IP address: first few IPs in VMware workstation are reserved for the use by the Workstation itself for the Virtual Host Adapters (i.e. the Network Adapter created in your host machine). Use IPs starting with .5 or higher and in VMware Workstation Network Manager, make sure to define the DHCP range starting at higher addresses, i.e. 192.168.1.100-192.168.1.254.

See this VMware article for details:

Selecting IP Addresses on a Host-only Network or NAT Configuration 

I would also advise against using 192.168.1.X range on your virtual network for Check Point: Often, the 192.168.1.X is the default network behind home routers, unless there is a good reason for it.

Regards,

Vladimir

[RickHoppe]

I ran into this problem too a while ago. It did not occur with the original R77.30 ISO but it started when using the ISO with the SHA-256 fixes. Appearently the assigned VMware harddisk was too small. When I choose to create 80Gb disks the problem dissappeared.

[Aman_Choubey]

Thanks Rick.

The problem has been resolve and Now I am able to access the Web UI.

One new problem Occurs when I am trying to connect Smart Dashboard one error is Showing.

One more thing I am not able to Configure the CA.

I am attaching the  Screenshot.

please help

thanks in advance.

[PhoneBoy]

This is exactly the problem described here: https://community.checkpoint.com/thread/6863-connection-cannot-be-initiated-please-make-sure 

Installing the latest Jumbo Hotfix should resolve the issue.