解决CP不能登录通过远程管理

解决CP不能登录通过远程管理

1.说明

本实验是在CPVmware环境下。

CP版本:R77.30

 

2.问题描述

在使用CPVmware虚拟机做实验的过程中,当你正常关机或重启后,可能系统起来了,但是发现不能通过SSHTelnetWEB进行管理了,并且SmartConsole也不能连接,而且使用SmartConsole连接提示要进GUI Client进行设置。针对此问题,提出简单的解决办法。有用的可以试下,没用的请另寻它法。

 

3.问题解决

 

Console中使用cpconfig命令

CP1> cpconfig

This program will let you re-configure

your Check Point products configuration.

 

Configuration Options:

----------------------

(1)   Licenses and contracts

(2)   Administrator

(3)   GUI Clients    //GUI 客户端设置

(4)   SNMP Extension

(5)   PKCS#11 Token

(6)   Random Pool

(7)   Certificate Authority

(8)   Certificate's Fingerprint

(9)   Disable Check Point SecureXL

(10) Check Point CoreXL

(11) Automatic start of Check Point  Products

 

(12) Exit

 

Enter your choice (1-12) :3

输入3,进行修改

 

Configuring GUI Clients...

==========================

GUI Clients are trusted hosts from which

Administrators are allowed to log on to  this Security Management Server.

You have selected the following hosts to  be GUI Clients:

any

192.168.10.*

 

Do you want to modify this list (y/n) [y]  ? y

//修改GUI Client列表

Do you want to [C]reate a new list, [A]dd or [D]elete one?: A

//根据提示,输入A添加可连接的GUI客户端

You can add GUI Clients using any of the  following formats:

1. IP address.

2. Machine name.

3. "Any" - Any IP without  restriction.

4. IP/Netmask - A range of addresses, for  example 192.168.10.0/255.255.255.0 or 2001::1/128

5. A range of addresses - for example  192.168.10.8-192.168.10.16 or 2001::1-2001::10

6. Wild cards (IPv4 only) - for example  192.168.10.*

 

Enter GUI Client: 192.168.10.*

如上,根据提示,可输入具体的地址,也可输入地址范围进行,根据实际情况输入即可。

 

输入后,会提示重启,save config保存配置并reboot重启即可。

重启后正常连接