Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Johannes_Schoen
Collaborator
Jump to solution

Lab environment - no valid license

Hi,

I've built up a lab-environment on my laptop to get in touch with the checkpoint features (1 mgmt, 2 sec-gateways as cluster)
I used eval-licenses and created them with " ALL-IN-ONE EVALUATION".

I installed the licenses by using smart update to my both cluster nodes (1 license each, the management IPs are matching)

Now I try to install a policy to the cluster, but the installation fails because of "no valid licenses".

The monitor shows that the firewall module on both nodes has no license. I can verify from cli, smart update etc. that these modules are licensed: 

CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150

What do I miss?

I already rebooted both nodes.

I'm really thankful about any reply.

Best Regards

2 Solutions

Accepted Solutions
G_W_Albrecht
Legend
Legend

ALL-IN-ONE EVALUATION gives you two licenses with central licensing that can be installed using SmartUpdate. The license you list above is the SMS part of the license. For the Module, you have also received a second license part looking like this:

Run 'cplic put [module name] <SMS IP> <date> <lic key> cpsg-c-8-u cpsb-fw cpsb-vpn cpsb-ipsa cpsb-dlp cpsb-sslvpn-u cpsb-ia cpsb-adnc cpsg-vsx-25s cpsb-swb cpsb-ips cpsb-av cpsb-urlf cpsb-aspm cpsb-apcl cpsb-abot cpsb-ctnt CK-............'

Validation Code:..............

The easy way is to just import the received license file; the SMS part will be attached automatically, but you have to attach the GW lic manually to one the cluster nodes! I think this is missing here.

And what else is missing ? The All In One is just for one GW and one SMS - for Cluster deployment, you have to generate another demo licanse, either a second All I One or a GW only license.

CCSE CCTE CCSM SMB Specialist

View solution in original post

0 Kudos
G_W_Albrecht
Legend
Legend

Usually you need not use that. I would suggest to use SmartUpdate, not CLI, anyway. And there you can just copy the complete license string from Email or UserCenter.

CCSE CCTE CCSM SMB Specialist

View solution in original post

0 Kudos
7 Replies
Roman_Niewiado1
Contributor

Hallo Johannes,

you need a license for a Security gateway CPSG

Do not take the All-In-One Security Bundle, but All-In-One Security Gateway.

It has to look like this:

Host Expiration Features
192.168.1.1 5May2018 CPSG-C-8-U CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CK-6EC6B741

G_W_Albrecht
Legend
Legend

ALL-IN-ONE EVALUATION gives you two licenses with central licensing that can be installed using SmartUpdate. The license you list above is the SMS part of the license. For the Module, you have also received a second license part looking like this:

Run 'cplic put [module name] <SMS IP> <date> <lic key> cpsg-c-8-u cpsb-fw cpsb-vpn cpsb-ipsa cpsb-dlp cpsb-sslvpn-u cpsb-ia cpsb-adnc cpsg-vsx-25s cpsb-swb cpsb-ips cpsb-av cpsb-urlf cpsb-aspm cpsb-apcl cpsb-abot cpsb-ctnt CK-............'

Validation Code:..............

The easy way is to just import the received license file; the SMS part will be attached automatically, but you have to attach the GW lic manually to one the cluster nodes! I think this is missing here.

And what else is missing ? The All In One is just for one GW and one SMS - for Cluster deployment, you have to generate another demo licanse, either a second All I One or a GW only license.

CCSE CCTE CCSM SMB Specialist
0 Kudos
Johannes_Schoen
Collaborator

Many thanks for your help - now it's working Smiley Happy

Good to know that a few license parts needs to be assigned manually  - I thought to avoid this the IP addresses are requested during the license creation process

0 Kudos
G_W_Albrecht
Legend
Legend

You just have to look into SmartUpdate, left side - you can see the licenses as Attached or Unattached. To get all services correctly, it mostly makes sense to update the contract file from UserCenter.

CCSE CCTE CCSM SMB Specialist
0 Kudos
Stelios
Contributor

Hi G_W_Albrecht, 

What i have to input on [module name], i try my gateway ip but it didn't work.

Thank you.

0 Kudos
G_W_Albrecht
Legend
Legend

Usually you need not use that. I would suggest to use SmartUpdate, not CLI, anyway. And there you can just copy the complete license string from Email or UserCenter.

CCSE CCTE CCSM SMB Specialist
0 Kudos
Stelios
Contributor
Thank you 🙂
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events