Command to show the number of permitted cores

[Danny]

I'm looking for Bash command to show the number of permitted (licensed) cores of any Check Point GAiA system, even when CoreXL is not enabled.

Thanks in advance!

[PhoneBoy]

It’s encoded in the license string, which means cplic print -p should show it.

[Danny · Accepted solution]

I created this one-liner:

case `cpstat os | grep "Appliance Name" | tr -s ' ' | cut -c17-21` in Check) grep -c ^processor /proc/cpuinfo;; *) cplic print -p 2>/dev/null | tr ' ' '\n' | grep fw1:6.0:mc_all_ | cut -c 16- | awk '{ sum += $1 } END { print sum }';; esac

and added it to our Common Check Point Commands (ccc) script.

[PhoneBoy]

On my system, the above command shows I am licensed for 16 cores, which I know to be false.

My system has two CPSG-CPSM-EVAL licenses, each of which contains 8 cores.

Also, one of the licenses is expired

Licensed cores are NOT additive, either.

[Danny]

Licensed cores are NOT additive?

What is this SmartUpdate message meaning then:

I added a 4-Core license to an 8-Core Eval license and are told to licensed for 12 cores now. This means licensed cores are additive, no?

[PhoneBoy]

Technically they're not supposed to be.

[Danny]

Well.. I can see CoreXL technically using all 12 cores.

[_Val_]

might be just a glitch with eval license

[JonasNyquist]

The Eval licenses has been "stackable" for a long time, actually.
I'm not 100 percent sure if that is also true for Production licenses, because I have never had any "proper" licenses to play around with... ;-), but I have seen in the "License String" of "Production" licenses that they have 2 x CPSG-C8-U in the beginning so I would think that you might be able to "stack" production licenses as well. I will update after I have tested that as well...  🙂

That said, just because you CAN do it doesn't mean that is is in fact allowed by the EULA/License rules...

[Norbert_Bohusch]

Technically this was the only way to license more than 8 cores before bigger core number came out

[Danny]

I found another issue with my one-liner when SMT is enabled:

The license contains just a string for 8 cores. However, with SMT enabled 16 cores are shown on the system and CoreXL actively uses them. Looks like I need to advance my one-liner a little more.

[_Val_]

Did you try rebooting this system. Number of cores is checked during boot against the license. Any chance you have had eval and did not reboot after it expired?

[JozkoMrkvicka]

In case gateway is using "new" license string where some features cannot be found in cp.macro, it gives you following output:

[Expert@GWA:0]# cplic print -p | tr ' ' '\n' | grep fw1:6.0:mc_all_ | cut -c 16- | awk '{ sum += $1 } END { print sum }'
 Warning: Can't find ::CPSB-CTNT in cp.macro. License version might be not compatible
8
‍‍‍‍‍‍‍

[_Val_]

Its okay, eval license might contain more features than known and supported with the version you use

[Danny]

Jozko Mrkvicka : Could you please try if the following command resolves the Warning message?

cplic print -p 2>/dev/null | tr ' ' '\n' | grep fw1:6.0:mc_all_ | cut -c 16- | awk '{ sum += $1 } END { print sum }'

[JozkoMrkvicka]

Hi Danny Jung‌,

Yes, it is solved now

[Expert@GWA:0]# cplic print -p 2>/dev/null | tr ' ' '\n' | grep fw1:6.0:mc_all_ | cut -c 16- | awk '{ sum += $1 } END { print sum }'
8
[Expert@GWA:0]#‍‍‍

You can update CCC with this updated syntax.

Thank you.

[Danny]

Added in version 3.3 of our Common Check Point Commands (ccc) script.

[_Val_]

Lol, was about to answer just that

[Henning_Gunders · Accepted solution]

Scripting is cool, but why not simplify it, by using the good old CLI command?

fw ctl get int fwlic_num_of_allowed_cores
fwlic_num_of_allowed_cores = 16

[PhoneBoy]

On my 1490, that command returns 100000

On my regular gateway (which runs the standard All-in-One eval), it returns 16.

[_Val_]

100000 - that's the way to go