fir3net
PPS-Firenetbanner-780.5x190-30-03-17

Nokia - Installing HFA30 onto a Diskless / Flash based Check Point Firewall

The following steps will allow HFA30 to install on flash based system if the /opt has less then 400mb.

Before we start you should ideally have the following free,

  • /opt = 212184
  • /prevserve = 480694
mkdir ~/hfa30
cd ~/hfa30
tar xzvf ~/VPN-1_R65_HFA_30.ipso.tgz
rm ~/VPN-1_R65_HFA_30.ipso.tgz
df -k

The output from df -k should now show over 400MB (400,000KB) available on /opt.

./UnixInstallScript

Alternative way to install HFA30 Install onto Diskless Nokia’s (1GB FLASH)

Method

The alternative is to copy a R65 HFA30 tgz from a IPSO device which has already been upgraded to HFA30 to the installed package folder of your device you are wanting to upgrade. Due to it being the same name, once the device has been rebooted the bootmgr will decompress and run the R65 HFA30 package.
The R65 HFA30 file can be found on a IPSO device currently running R65 HFA 30 in /opt/packages/installed/fw1_R65_IPSO.tgz

Note

It is important that you confirm the file that you are copying across is the same as the existing file on the device. The first option is just to gain an overview of what’s running on the system.

  1. clish -c "show package active"
  2. ipso[admin]# ls /opt/packages/installed/

What are the steps ?

Note that pscp is scp putty, which is used to transfer the file. To download this free program please visit the putty website. 

  1. ipso[admin]# cpstop
  2. pscp fw1_R65_IPSO.tgz [username]@[fw ip]:/opt/packages/installed
  3. Confirm that the new package has copied across correctly ipso[admin]#gzip –t –v /opt/packages/installed/fw1_R65_IPSO.tgz
  4. Reboot the device
  5. Confirm that the device is now running HFA30 - ipso[admin]#fw ver

Tags: Check Point, IPSO

About the Author

RDonato

R Donato

Rick Donato is the Founder and Chief Editor of Fir3net.com. He currently works as a Principal Network Security Engineer and has a keen interest in automation and the cloud.

You can find Rick on Twitter @f3lix001