Check Point L-71, Руководство администратора

Страница: 41 / 124

First Time Deployment Options
Check Point 1400 Appliances Centrally Managed Administration Guide R77.20.85 | 41
Sample Configuration File
This is a sample Check Point Appliance configuration file for USB deployment.
set time-zone GMT+01:00(Amsterdam/Berlin/Bern/Rome/Stockholm/Vienna)
set ntp server primary 10.1.1.10
set ntp server secondary
set user admin type admin password aaaa
set interface WAN ipv4-address 10.1.1.134 subnet-mask 255.255.255.192 default-gw
10.1.1.129
delete interface LAN1_Switch
set dhcp server interface LAN1 disable
set interface LAN1 ipv4-address 10.4.6.3 subnet-mask 255.255.255.0
add interface LAN1 vlan 2
set dhcp server interface LAN1:2 disable
set interface LAN1:2 ipv4-address 10.4.3.3 subnet-mask 255.255.255.0
set dhcp server interface LAN2 disable
set interface LAN2 ipv4-address 192.168.254.254 subnet-mask 255.255.255.248
set interface LAN2 state on
set admin-access interfaces WAN access allow
set hostname DEMOgw01
Preparing the Configuration Files
The Check Point Appliance Massive Deployment configuration files are composed of CLIsh
commands. These are the file names that can be used:
•
autoconf.clish
•
autoconf.XX-XX-XX-XX-XX.clish
You can create multiple configuration files for different Check Point Appliance gateways. Name
each file based on the MAC address of each appliance. The Check Point Appliance first searches
for a configuration file with the same MAC address. If there is no file that matches the MAC
address of the appliance, the
autoconf.clish
configuration file is loaded.
Deploying the Configuration File - Initial Configuration
This section describes how to deploy a configuration file on a USB drive to the Check Point
Appliance. You must configure and format the file correctly before you deploy it. You can insert the
USB drive in the front or rear USB port. Make sure the USB drive is formatted in FAT32.
You can deploy the configuration file to the Check Point Appliance when the appliance is off or
when it is powered on.
Important
- Do not remove the USB drive or insert a second USB drive while the
configuration script runs. This may cause a configuration error.