Notes:

vConsole is supported only via the iDRAC graphical user interface (GUI), which is built on HTML5; Java or OpenJRE are not officially supported.

• Check Point is in the process of integrating the LOM (iDRAC) with Gaia OS to provide more secured and robust operations. Customers who require LOM (iDRAC) now, are instructed to use it in the following fashion:

  Access should be limited by placing a firewall in front of the LOM interface. Firewall must allow traffic to the LOM interface (HTTPS, port 443) only from the specific internal IP addresses on your network. These internal IP addresses must be trusted, and their connections to the LOM interface must be over a trusted network.

Important:

• Creating a user can only be done with the SetiDRACUser command.

• Creating a user in another way may lead to problems, and is not supported by Check Point.

Procedure:

1. Install the required hotfix (if necessary) on the Smart-1 appliance.

2. In Expert mode, create a new restricted operator iDRAC user. Run:

   SetiDRACUser

   1. Confirm the EULA.

      Show / Hide examples
      

      • On R80.20 with R80.20 JHF (Take 160 and higher), R80.30 with R80.30 JHF (Take 163 and higher), R80.40 and higher:

        Enable access to LOM (iDRAC) in a protected environment only.
Configure a firewall in front of the LOM interface that restricts access to specific sources only. The users must connect over trusted networks.

Do you wish to continue (y/n)? y

      • On R80.10:

        Warning!

You are installing a hotfix enabling an administrative control of the Check Point Smart-1 appliance through a LOM interface, being offered to users who have requested to have the LOM interface enabled prior to the release of a formal update. By proceeding with the installation, you acknowledge and agree that this is a preliminary interim solution developed without having undergone Check Point's ordinary testing and development processes and may therefore carry certain vulnerabilities.

You further acknowledge that this hotfix is provided to you for your own internal use and agree to treat it as confidential and proprietary and not allow its release or installation by anyone outside your organization.

Do you wish to continue (y/n)? y

   2. Enter the User ID.

      Note: The User ID should be between 3-16 (For example: 5, 7, 12).

   3. Enter the User Name.

   4. Enter the User Password.

      It is strongly recommended that the password be strong.

3. The default IP address of the LOM/iDRAC interface is: 192.168.0.100

   To change this IP address:

   1. Connect to the command line on the Smart-1 Appliance.

   2. Log in to Expert mode.

   3. Run:

      lomipset <New-IP-Address> <New-Netmask> <New-Default-Gateway>

      Note: It takes 1-2 minutes for this change to apply.

Command syntax notes:

• To enable an iDRAC user:

  SetiDRACUser <UserID> <UserName> <Password>

• To disable an iDRAC user:

  UnsetiDRACUser <UserID>
  

Where <UserID> must be between 3-16 (For example: 5, 7, 12).

If you enable the LOM (iDRAC) support, Check Point recommends that you use the LOM (iDRAC) to only work with the features described below.

Warning: Using the LOM (iDRAC) to modify features other than those listed below may present a security risk.

The screen captures below illustrate how to navigate to the recommended features on each of the models.

Click an item to show/hide its content:

• Accessing Logs

  For Smart-1 525: Log in and click "Logs".

  

  For Smart-1 625/5050/5150/600-M/6000-L/6000-XL: Log in and click "Maintenance".

  

• Virtual Console

  For Smart-1 525: Log in and click "Virtual Console".

  

  For Smart-1 625/5050/5150/600-M/6000-L/6000-XL: Log in and click "Configuration > Virtual Console".

  

• Monitoring

  For Smart-1 525: Log in and click "Server > Summary".

  

  For Smart-1 625/5050/5150/600-M/6000-L/6000-XL: Log in and click "System".

  

• Power Monitoring

  For Smart-1 525: Log in and click "Power / Thermal > Power Monitoring".

  

  For Smart-1 625/5050/5150/600-M/6000-L/6000-XL: Log in and click "Configuration > Power Management".