Install Notes
OSPF with Checkpoint and Enterasys
Keep your eyes peeled for notes on an upcoming install we're doing with a Checkpoint Power-1 5070, Nokia IP390, Enterasys S4 and SSA switches for multi-link redundancy using OSPF over a private gigabit circuit on one side and a VPN link on the other side.
Checkpoint Power-1 5070 Appliance Install Notes
Well, we've installed our first Checkpoint Power-1 5070 Appliance. It's been fun. Since the box came stock with R65 and R71.10, we had to do an upgrade. I wanted R75.20 to start since this is a fresh install and I wanted the AD integration with URL filtering. Most of my experience with Checkpoint revolves around Nokia IP series with IPSO, so a firewall running SecurePlatform/SPLAT was pretty new. I knew SPLAT already from a SecureConsole perspective but not on the firewall itself. I jumped through the hoops of doing a straight R75 upgrade, which worked, then I tried to do an upgrade to R75.20 which didn't work out so well as it kept failing with little evidence as to why. I was still ahead of schedule though and decided to do a fresh install of R75.20, which makes me feel better anyway. I got my external DVD drive, burned Check_Point_R75.20_Appliance.iso to a disc and rebooted the 5070 with my console cable in my mac with a serial to USB connector. As soon as the post goes away, you'll see something that says press enter within 90 seconds for installation. I did so and watched the action. It wipes the unit and puts two images in place, which are R71.30 and R75.20 WOOHOO! Now, I can go back through the install wizard and get moving right along. Next is the SPLAT management box coming tomorrow.