Re: [FW1] Nokia 440 License problems

[Chris Alterio]

Hi Jeff,   I had this problem too. I had entered the features in lower case but they needed to be in upper case. I also got some message about something not found in cp.macro.   To correct the issue, I had to re-enter all the licenses because there is no way to delete an invalid one (at least not on my platform -- Solaris). I entered the first license with the "fw putlic -o" to overwrite the licenses, in effect starting from scratch. I then used cpconfig to add the other licenses (although I could have used the fw putlic without the -o).   As far as the prompt you got, I was told that replying "y" would stop the firewall for a minute or two and thus should be done at a later time, if possible.  I was also told that I could do fwstop and then fwstart to have the licenses take effect with less downtime (a minute or less).   Good luck! ----- Original Message ----- From: Jeff Bender To: FW1 Mailing list (E-mail) ; Brad Smith (E-mail) ; Jason Maley (E-mail) ; Nathan Long (E-mail) Sent: Thursday, August 17, 2000 1:48 PM Subject: [FW1] Nokia 440 License problems After generating the permanent license from license.checkpoint.com, I tried to enter the license into the 440 by both the 'fwputlic <host> never yada-yada-yada...' and the fwconfig utility on the machine.  In both cases it says the license is invalid, but the fwconfig tool is a little more specific and tells me 'Failed to add license: no such feature'.  Upon exit of the utility, it says "You have changed VPN-1 & Firewall-1 Config.  Would you like to restart VPN-1 & Firewall-1 now so your changes can take into action? (y/n)'  I selected 'y' for s-n-g's and it indicates somewhere in the message that the max allowable is 25 internal hosts, but the license feature indicates a 100 user/host license.  What do I do?   Also, When I type in 'IFCONFIG' (this is all through a serial cable and telnet) on the 440, I can see that the IP's for the nic's are correct, but I cannot ping any of them from any port on the nic.  I tried (through tcp/ip / Ethernet) to get to Voyager by typing in the ip for the host IP for the 440- but it can't be found.  Probably for the same reason that ping isn't working.    Can anyone shed some light on this?  I'm really green to the security realm, and would welcome any help.