MHO-140 Maintenance Mode

[Daniel_Hainich]

Hi,

i try to enter maintenance mode on mho-140. iam unable to enter username and password, the cursor is jumping back to first position.

console is working, this occur only in maintenance mode.

daniel

[emmap]

Other than making extra sure you have the correct login details and correct serial settings:

https://sc1.checkpoint.com/documents/Appliances/GSG_Maestro/EN/Topics/Ports.htm#Consoleport

then I don't know why it would do this. 

[Daniel_Hainich]

i triple checked the console settings. i used putty and xhsell8, but maybe mobaxterm or securecrt are working.

there are any special settings inside the tools i have to set?

[emmap]

The only settings for serial connections are the ones in the link there, around baud rate and whatnot.

[Daniel_Hainich]

no luck. SecureCRT, MobaXterm, Putty, Xshell, minicom(ubuntu) - all the same.

[Danny]

The terminal tools I use are:

• Windows: Tera Term
• Mac: CoolTerm

[Timothy_Hall]

Make sure you are using a proper console cable.  The MHO-140 is very sensitive to the pinouts of the console cable, and using one with extra pins connected can crash the box, and could possibly interfere with the terminal handling in maintenance mode: sk184477: MHO 140 unexpectedly shuts down when connected to console servers that provide signaling o...

[WiliRGasparetto]

This username and password belong to the Maestro owner account, and only Check Point TAC engineers have access to it. You will need to open a support case with Check Point to have this resolved.

This is different from regular Check Point firewalls, where you can simply enter your own username and password.

[Lesley]

BIOS is via TAC(for example to change boot prio). Console itself is possible:

https://sc1.checkpoint.com/documents/Appliances/GSG_Maestro/EN/Topics/Getting-Started.htm#:~:text=In....

I think Timothy is right, different cable will solve this. If the settings of emmap are set ofc 

[Daniel_Hainich]

hi, i have tested with 2 different original cisco cables. 2 different notebooks, one with integrated serial port (win11), other device with usb2serial adapter and ubuntu. i used 5 different tools.  i could update one of my mho to r81.20 take 120. it doesnt solved the problem. either its a strange setting in all tools so the mho is misinterpreting the inputs or there is something other wrong with 2 mho. and normal serial console is working without problem.

[emmap]

To confirm for sure, this is the Maintenance option from the grub menu you're trying to get into?

[Daniel_Hainich]

yes, it is the maintenance option from grub boot menu. in the meanwhile i testet also teraterm - no luck. 

iam typing in the username wartung, after confirmation with return iam typing in the password and comfirm with return. after some seconds iam back on the boot menu.

[emmap · Accepted solution]

Is that a regular Gaia user? Maintenance mode needs to be entered with the user 'admin' and either the expert password or the grub password, depending on version and what was configured.

https://support.checkpoint.com/results/sk/sk118973

[Daniel_Hainich]

yes, i already tried the admin user and expert passwort.

[Daniel_Hainich]

hello,

i found the solution in sk177687. i tried to login with admin and admin-pass/expert-pass. but this was not working. after setting a custom grub-password and login as admin/grub-pass all is working. and the terminalsession should not be in fullscreen-mode. 

@emmap was pointing to right direction, but my brain got stuck after i tried not working expert-password... sorry! your post is the solution.