Home Page | Skip to Navigation | Skip to Content | Skip to Search | Skip to Footer
 Support Center > Search Results > SecureKnowledge Details
Support Center
 Print    Email
Gaia installation on IP Series appliances from USB storage device

Solution ID: sk83200
Product: IP Appliances
Version: R75.45, R75.46, R76, R77, R77.10
OS: IPSO 6.2, Gaia
Platform / Model: IP280, IP290, IP690, IP1280, IP2450, IP150
Date Created: 03-Oct-2012
Last Modified: 08-Mar-2014
Rate this document
[1=Worst,5=Best]
Solution

Table of Contents:

  • Supported IP Series appliances and software versions
  • Supported USB storage devices
    • Workaround A
    • Workaround B
    • Workaround C
  • Installation procedure
    • Necessary files
    • Step 1. Transfer the Gaia ISO file to the USB drive
    • Step 2. Install Gaia OS using USB storage device
    • Step 2A. Installing the First appliance using USB storage device
    • Step 2B. Installing the Second and Subsequent appliances using USB storage device
    • Step 2C. Completion
    • Step 3. After fresh install, run the First Time Configuration Wizard
  • Related solutions

 


 

Supported IP Series appliances and software versions

USB installation of Gaia OS is supported on the IP Series appliances with USB ports:

  • Supported IP Series appliances: IP150, IP280, IP290, IP690, IP1280 and IP2450.

  • Non-supported IP Series appliances: IP390, and IP560.

Note: Only Disk-based appliance are supported with Gaia OS at this time.

 

The following releases support USB installation: R75.45, R75.46, R76 and above. Future releases on the R75.4x line will continue to support USB installation.

 

Supported USB storage devices

The following USB storage devices have been tested and worked:

  • HP USB sticks (8G and 16G tested OK)
  • Kingston Data Traveler G2 1.00 4GB
  • Silicon Power 16GB
  • Imation 4GB
  • PNY 8GB
  • Sandisk Cruzer 4GB
  • Gigamon "China" 4GB
  • Lexar JumpDrive USB Flash Drive 4GB

 

The following USB storage devices have been tested and the following issues were found:

  • Sandisk Cruzer 8G - installation script exits, and unit ends up in the Gaia Boot manager. See 'Workaround B' below.
  • Sandisk 32G - does not work; installation script interprets this USB device as a fixed HDD, and formats it with Gaia file system. See 'Workaround C' below.
  • PNY 4G - installation script exits, and unit ends up in the Gaia Boot manager. See 'Workaround B' below.
  • Kingston DataTraveler G2 16GB - Works on all IP Series appliances, except IP290. On IP290 appliance only, requires 'Workaround A' below.
  • A-DATA C906 4GB - does not work.
  • Emtec Micro USB Flash Drive 8GB - does not work.

 

Important Note: Use USB storage devices, which have only one partition. If a USB storage device was previously used for a third-party application, or is partially encrypted, Check Point ISOmorphic tool will not be able to remove the extraneous partitions, and the installation will fail.

 

Workaround A

Issue: instead of loading boot manager, IP290 appliance is stuck after 'memtest' when USB storage device is inserted.

 

The workaround for this issue is:

  1. Unplug the USB storage device.

  2. Wait until 'memtest' completes, and boot manager starts loading (approximately 20-25 seconds).

  3. Insert USB storage device (before boot manager finishes loading).

  4. When installation is complete, remove the USB storage device before restarting the machine, otherwise the machine will stuck during boot.

 

Workaround B

If you end up at the Gaia Boot Manager prompt during installation, you should remove the USB storage device and then insert it back.
The console should show that the device is recognized, then you can continue the installation by typing INSTALL at the boot manager prompt.
If the USB storage device is not recognized when inserted back (an I/O error appears on the console), complete the installation using one of the following two methods:

  1. Remove the USB storage device and proceed to do installation via FTP server by typing INSTALL at the boot manager prompt, and providing FTP credentials.

  2. Use the Check Point ISOmorphic tool to configure a supported USB storage device. Insert that USB storage device instead of the original one, and complete the installation by typing INSTALL at the boot manager prompt.

 

Workaround C

Some USB storage devices are not properly recognized by the Gaia installation script 'Anaconda'. During the disk formatting stage, it will overwrite the USB storage device with the Gaia filesystem. The Sandisk 32G USB storage device was found to be affected by this issue.

If this issue is encountered, then use Check Point ISOmorphic tool to configure a supported USB storage device. Insert that USB storage device instead of the original one, and complete the installation by typing INSTALL at the boot manager prompt.

 

Installation procedure

 

Necessary files

USB installation is included in the R75.45, R75.46, R76 and later releases.

Download the Gaia ISO from the release you are installing. You must also use the Check Point ISOmorphic tool build 72 or higher. You can download the most current version of ISOmorphic at this link: Check Point ISOmorphic tool.

Note: Check Point ISOmorphic tool should be installed on a Windows-based machine, which can write data to USB storage device without requiring the user to encrypt that USB storage device.

 

Step 1. Transfer the Gaia ISO file to the USB drive

Note: The USB storage device should have the storage capacity of at least 4 gigabytes. If several IP Series appliances need to be installed, it is recommended to use a USB storage device with even greater storage capacity - to save the backup files.

  1. Copy the Gaia ISO file to the Windows machine, on which the ISOmorphic tool was installed.

  2. Run ISOmorphic tool.

  3. Choose the USB storage device, choose the Gaia ISO file.

  4. ISOmorphic tool will automatically copy the Gaia ISO file to USB storage device.

 

Step 2. Install Gaia OS using USB storage device

  1. Insert the USB storage device into IP Series appliance.

  2. From IPSO CLI, mount the USB storage device by running:

    [HostName]# mount -t msdosfs -o rw DEVICE /cdrom

    Use the following table to determine the exact 'DEVICE':

    Model device
    IP150 /dev/da0s1
    IP280 /dev/da0s1
    IP290 /dev/da0s1
    IP690 /dev/da0s1
    IP1280 /dev/da1s1
    IP2450 /dev/da1s1


  3. Run the installation script:

    [HostName]# cd /cdrom/
    [HostName]# ./Check_Point_USB_Install_IPSO6.2_to_Gaia

    Important note: Do NOT unplug the USB storage device until the Gaia installation is complete.

    The installation script checks the BIOS version, and if it is not the most recent, offers to upgrade it:

    • To upgrade later, type 'n' and press Enter.

    • To upgrade now, type 'y' and press Enter. BIOS will be upgraded, and the appliance will be rebooted.
      Then repeat Step 2 and Step 3 above - re-mount the USB storage device, and run the installation script again.

 

Step 2A. Installing the First appliance using USB storage device

The installation script asks whether:

  • to perform a fresh install
  • to perform an upgrade

Select the relevant operation.

 

Step 2B. Installing the Second and Subsequent appliances using USB storage device

The installation script asks whether:

  • to perform a fresh install
  • to perform an upgrade
  • to perform an upgrade with answers from date

Select the relevant operation.

Clarification: "Upgrade with answers from date" is an option, which only shows up after the first time you use the memory stick. The answers, which were given previously (on the date shown) are stored, and can be selected for use if you want to replicate all the same answers on subsequent installations.

 

Step 2C. Completion

The installation script installs the IPSO-to-Gaia upgrade package and completes the chosen operation (fresh install, or upgrade). An IP Series appliance will be automatically rebooted to start the Gaia installation.

Warning: If "An upgrade with answers from date" operation was chosen, part of this operation runs in the background, and the user is returned to the shell before it completes. Do not perform any activity on the appliance until it reboots.

Notes:

  • For upgrades - backup files, the upgrade verifier reports, and an auto-install IPSO package are automatically saved to the USB storage device.
    For fresh installs - backup files are automatically saved to the USB storage device.
    Since the backup files can be rather large, saving them to USB storage device may take some time (5-10 minutes).
    For this reason, the installation script will show the size of the the backup files, and will ask whether to proceed.
    It is recommended to confirm to save the backup files, unless these have been already saved as part of normal system maintenance.

  • For fresh installs - one of the interfaces is automatically configured with the IP address 192.168.1.1 / 24.
    This mimics the behavior of the installer on other Check Point appliances. The assumption is that there will be a local computer on the 192.168.1.0 / 24 subnet to configure the appliance using First Time Configuration Wizard. During the First Time Configuration Wizard, that interface can be configured with the desired IP address.


The IP Series appliance will reboot again upon completion of Gaia OS installation. Now, the USB storage device can be unplugged.

 

Step 3. After fresh install, run the First Time Configuration Wizard

  1. Log in via CLI with user name 'admin' and password 'admin'.

  2. Choose the most convenient step (2A, or 2B below) for configuring/identifying the relevant interface, through which you will later connect to Gaia Portal to go through First Time Configuration Wizard:

    1. Identify an existing interface with default assigned IP address 192.168.1.1:

      1. Switch from CLISH to Expert mode:

        HostName> expert

      2. Identify the name of the interface that has been auto-configured with IP address 192.168.1.1:

        [HostName]# cat /etc/sysconfig/newsystem.conf


    2. Choose an interface and configure it with desired IP address:

      1. Assign an IPv4 address to desired interface in CLISH:

        HostName> set interface INTERFACE_NAME ipv4-address IP_ADDRESS mask-length SUBNET_MASK_LENGTH_in_BITS

      2. Set the relevant Default Gateway in CLISH:

        HostName> set static-route default nexthop gateway address IP_ADDRESS_OF_DEFAULT_GATEWAY on


  3. Connect a computer to the interface from previous step.

  4. Configure the computer with an IP address on the same subnet as the interface from previous step.

    Examples:

    • If you used an existing interface with default assigned IP address 192.168.1.1 / 24, then configure the computer with any IP address from that subnet - e.g., 192.168.1.33 / 24.

    • If you chose and configured an interface with desired IP address - e.g., 20.20.20.22 / 24, then configure the computer with any IP address from that subnet - e.g., 20.20.20.44 / 24.


  5. Open Web browser, and connect to Gaia Portal:

    • If you used an existing interface with default assigned IP address 192.168.1.1 / 24, then connect to https://192.168.1.1.

    • If you chose and configured an interface with desired IP address - e.g., 20.20.20.22 / 24, then connect to https://20.20.20.22.


  6. Log in to Gaia Portal with user name 'admin' and password 'admin'.

  7. Complete the First Time Configuration Wizard to configure this IP Series appliance.

 


Give us Feedback
Rate this document
[1=Worst,5=Best]
Additional comments...(Max 2000 characters allowed)
Characters left: 2000