Lab environment - no valid license

[Johannes_Schoen]

Hi,

I've built up a lab-environment on my laptop to get in touch with the checkpoint features (1 mgmt, 2 sec-gateways as cluster)
I used eval-licenses and created them with " ALL-IN-ONE EVALUATION".

I installed the licenses by using smart update to my both cluster nodes (1 license each, the management IPs are matching)

Now I try to install a policy to the cluster, but the installation fails because of "no valid licenses".

The monitor shows that the firewall module on both nodes has no license. I can verify from cli, smart update etc. that these modules are licensed: 

CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150

What do I miss?

I already rebooted both nodes.

I'm really thankful about any reply.

Best Regards

[Roman_Niewiado1]

Hallo Johannes,

you need a license for a Security gateway CPSG

Do not take the All-In-One Security Bundle, but All-In-One Security Gateway.

It has to look like this:

Host Expiration Features
192.168.1.1 5May2018 CPSG-C-8-U CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CK-6EC6B741

[G_W_Albrecht · Accepted solution]

ALL-IN-ONE EVALUATION gives you two licenses with central licensing that can be installed using SmartUpdate. The license you list above is the SMS part of the license. For the Module, you have also received a second license part looking like this:

Run 'cplic put [module name] <SMS IP> <date> <lic key> cpsg-c-8-u cpsb-fw cpsb-vpn cpsb-ipsa cpsb-dlp cpsb-sslvpn-u cpsb-ia cpsb-adnc cpsg-vsx-25s cpsb-swb cpsb-ips cpsb-av cpsb-urlf cpsb-aspm cpsb-apcl cpsb-abot cpsb-ctnt CK-............'

Validation Code:..............

The easy way is to just import the received license file; the SMS part will be attached automatically, but you have to attach the GW lic manually to one the cluster nodes! I think this is missing here.

And what else is missing ? The All In One is just for one GW and one SMS - for Cluster deployment, you have to generate another demo licanse, either a second All I One or a GW only license.

[Johannes_Schoen]

Many thanks for your help - now it's working

Good to know that a few license parts needs to be assigned manually  - I thought to avoid this the IP addresses are requested during the license creation process

[G_W_Albrecht]

You just have to look into SmartUpdate, left side - you can see the licenses as Attached or Unattached. To get all services correctly, it mostly makes sense to update the contract file from UserCenter.

[Stelios]

Hi G_W_Albrecht, 

What i have to input on [module name], i try my gateway ip but it didn't work.

Thank you.

[G_W_Albrecht · Accepted solution]

Usually you need not use that. I would suggest to use SmartUpdate, not CLI, anyway. And there you can just copy the complete license string from Email or UserCenter.

[Stelios]

Thank you 🙂