MHO BIOS Tutorial – Fixing Unexpected Default IP on MHO-140 During Initial Deployment (SOLVED)

[israelfds95]

Recently, while deploying an MHO-140 cluster, I noticed that the devices was not accessible using the default IP 192.168.1.1, as indicated in the guide included in the box.

After checking via console cable, I saw that the appliance was configured with a different IP address: 192.168.10.101/24. Even configuring my laptop in the same subnet, I was still unable to access the device.

guide included in the box.

In my case, two appliances had the same behavior.

To resolve the issue, I performed a clean installation of R82 using a USB drive, changing the boot order in the BIOS. After the installation finished, the device started with the expected default IP 192.168.1.1, allowing the First Time Wizard to run normally:

Prepare the USB Drive in BIOS Mode

Prepare the USB installation media in BIOS mode for the following appliances:

• MHO-140
• MHO-170
• MHO-175

This ensures the device can boot correctly from the USB drive during the installation process.

Accessing the BIOS Menu    

NOTE: It would be great if Check Point included the serial cable and a USB adapter, or a USB-to-serial cable, in the Maestro appliance box, since nowadays almost no one has a computer with a native serial port.

To access this screen bellow, press Esc + Num 7.

When powering on the appliance, open the console session immediately and repeatedly press Esc + Num 7. This will allow you to enter the secondary BIOS interface.

Password: NebulaH11

Note: This password is documented in the Check Point guide available at the link below:

https://sc1.checkpoint.com/documents/PDF/R81.10_Common_Criteria_EAL4+_Installation_and_Configuration...

Select the USB drive from the list and press ENTER to set it as the boot device.

Select option 2.

At the end of the installation, remove the USB drive and reboot the appliance.

Then complete the setup by running the Maestro First Time Wizard, now being able to access the device using the IP address 192.168.1.1.

For me, this is the best and fastest option.

Now I will show another way to access the BIOS, although this method usually does not recognize the USB drive. In most cases, it only works using Esc + Num 7, but it is still worth trying and knowing the available options.

You can also try to access the BIOS at the very beginning of the boot process by pressing Ctrl + S.

Select the option “Use BIOS Setup Boot Order.”

Press Space to select it. If the USB drive is recognized, it will appear as a boot option and the system will continue booting from the USB drive.

However, in some cases the USB drive may not be recognized using this method, and you may need to use the first method instead.

Best Regards

[WiliRGasparetto]

very good post @israelfds95 

[the_rock]

Amazing bro!

[Lesley]

Extra cable's will be more ewaste, most of the stuff you get you throw away, maybe 1 cable on spare and 1 that you use. Especially if you frequently install appliances. 

The unknown IP I have seen more on other appliances. Maybe it is refurbished or in the process somehow a incorrect IP lands on the appliance when it is installed for the first time. 

[israelfds95]

I understand the point about extra cables. However, since the appliances already include a serial cable, it might be better if it were a more modern RJ45-to-USB serial cable, since most laptops today do not have a native serial port.

Regarding the unexpected IP, it was strange because these were brand new MHO appliances, opened directly from the box. It took us some time to identify the issue, so I just wanted to share the experience here.

[the_rock]

You know what they say...better be safe, than sorry. So, I totally get all your points!

[Lesley]

Even brand new from the box can sometimes happen they are not brand new 😉 

Would recommend CP to leave all cables out, no point tbh every it engineer has loads of them in the toolkit. 

Apple recently started to remove even power adapters with the laptops, price stays the same tho 

[WiliRGasparetto]

The idea of ​​the original cables already coming with RJ-45 and USB would be excellent for me.

[Nicholas_Cuba]

I  set up a brand new NFR MHO-175 three weeks ago. It came with a factory default image of R81.20 and the Mgmt1 port had the same preconfigured IP address: 192.168.10.101/24  and gateway 192.168.10.10

[israelfds95]

This IP address is really very strange on brand-new appliances.