LTE (Long Term Evolution), marketed as 4G LTE, is a standard for wireless communication of high-speed data for mobile phones and data terminals. This article describes the LTE hotfix above R76 for Telco and LTE carriers market.
- Firewall-1 GX support including GTPv0 / GTPv1 and GTPv2
- GTP CoreXL support
- GTP signaling rate limit
- SCTP inspection and acceleration
- Diameter inspection
- Syslog support
- VPN-1 functionality for S1 interface
- MSS adjustment
- Stateful NAT64
- Stateless NAT46
- Large Scale VPN
R76 LTE Hotfix can be installed only on top of R76 Factory Image.
For more information please refer to the Release Notes.
If R76 LTE Security Gateway is managed by a Management Server without LTE Hotfix, a specific kernel parameter should be set on R76 LTE Security Gateway during boot.
Follow sk26202 (Changing the kernel global parameters for Check Point Security Gateway) to permanently set the value of kernel parameter
gtp_allow_bc_ver_entry to 1 (one):
- Connect to command line on R76 LTE Security Gateway (over SSH, or console).
- Log in to Expert mode.
- Permanently set the value of kernel parameter '
gtp_allow_bc_ver_entry' to 1:
- Create the
$FWDIR/boot/modules/fwkern.conf file if it does not exist:
[Expert@HostName]# touch $FWDIR/boot/modules/fwkern.conf
- Edit the
$FWDIR/boot/modules/fwkern.conf file in Vi editor:
[Expert@HostName]# vi $FWDIR/boot/modules/fwkern.conf
- Add the following line (spaces are not allowed):
- Save the changes in the file and exit from Vi editor.
- Check that the value was set for the '
[Expert@HostName]# grep "gtp_allow_bc_ver_entry" $FWDIR/boot/modules/fwkern.conf
- Reboot the R76 LTE Security Gateway.
- Verify that the value of kernel parameter was set to 1:
[Expert@HostName]# fw ctl get int gtp_allow_bc_ver_entry
gtp_allow_bc_ver_entry = 1
This solution is about products that are no longer supported and it will not be updated