Check Point L-71, Руководство администратора

Страница: 14 / 124

Installation
Check Point 1400 Appliances Centrally Managed Administration Guide R77.20.85 | 14
Configuring the Check Point Appliance Gateways
See your Check Point Appliance
Getting Started Guide
for full instructions to set up and connect
the Check Point Appliance.
This is the general workflow:
1. Connect your computer to the Check Point Appliance on its LAN1 interface.
2. Configure your computer to get an IP address automatically.
3. Open your Web browser, and connect to: http://my.firewall
When you configure two Check Point Appliance gateways from your web browser, connect only
one to a power source. Follow the instructions below to configure it and then disconnect it
from the power source. Then do the same for the second appliance and reboot it at the end.
If you do not follow these instructions, you cannot use the http://my.firewall URL correctly and
you need to connect with the gateway's actual IP address. (That IP address is initially
192.168.1.1 on LAN1 before you configure it with the Check Point Appliance).
After you configure and connect both appliances to a power source, install a policy and renew
the dynamic IP of the computer. You can then use http://my.firewall to access the active
member of the cluster.
4. Follow the steps to configure the Check Point Appliance with the First Time Configuration
Wizard.
5. On the appliance's local network, configure the cluster SYNC interface on the same subnet as
the SYNC interface of the second cluster member (use a cross Ethernet cable for SYNC
interface connection).
When you use the SmartDashboard cluster wizard, the LAN2 interface is the SYNC interface
between cluster members. You do not have to configure an IP on LAN2 at any stage of the
gateway side configuration. If you do not configure them, LAN2 SYNC interfaces are
automatically set to 10.231.149.1 and 10.231.149.2. To set a different SYNC interface (not
LAN2), see sk52500
http://supportcontent.checkpoint.com/solutions?id=sk52500 .
Remember the one-time password. You need it to configure the cluster in SmartDashboard. It
must be the same on both clusters.
IP addresses must be configured on both cluster members before you open SmartDashboard
and run the Cluster configuration wizard. To configure IPs in interfaces other than WAN and
LAN1, do so in each gateway’s WebUI application with the
Internet or Local Network pages.
Make sure that for each interface that is part of the cluster, you configure an IP in the same
subnet as the second cluster member.
Configuring the Cluster Object in SmartDashboard
To create a cluster for two new Check Point Appliance gateways:
1. Log in to SmartDashboard with your Security Management credentials.
2. From the Network Objects tree, right click Check Point and select Security Cluster > Small
Office Appliance
.
The Check Point Security Gateway Cluster Creation dialog box opens.
3. Select Wizard Mode .
The wizard opens to General Properties.
4. Enter a name for the Check Point Appliance cluster.
5. Click Next .
The wizard opens to Cluster Members.