Shenzhen letter lion checkpoint firewall Common Maintenance Commands

1 ver
View Secureplatform version, including patches and minor version number
Here Insert Picture Description
2 fw ver
view the version of the firewall, including patches and minor version numbers
Here Insert Picture Description
3 View Firewall UTM / POWER version
After you enter the sysconfig command, then select 10) Products Installation, select Next, Yes you can see the firewall version is installed, as shown in Figure
Here Insert Picture Description
4 View firewall hardware model
to enter expert mode, execute the command / usr / sbin / dmidecode | more . In the field handle 0x0001, UTM model code as follows, if the PC Server, a hardware model may be identified, as shown in FIG
Here Insert Picture Description
Here Insert Picture Description
. 5 license to view and add
Use cplic command to view, add license operation
Here Insert Picture Description
can speak when adding license by license tftp transmitted to the firewall, into the current directory performed cplic put -l license file name, as shown in FIG
Here Insert Picture Description
. 6 the ifconfig / the ifconfig -a
the ifconfig command to view the interface information of the firewall, ifconfig -a you can see all the interface information
Here Insert Picture Description
7 mii-tool
executed in expert mode below mii-tool command line interface to view the connection
8 ethtool
use this command to view the interfaces of the firewall, shown below, can view the full-duplex interface, and the bandwidth property line connection and many more.
Here Insert Picture Description
You can also use this command to change the firewall interface, full-duplex bandwidth and other properties, use the command mode ethX speed 10/100/1000 is ethtool -s | duplex full / half | autoneg on / off, these parameters can select all configurations, parameters may be arranged only partially.
Here Insert Picture Description
9 cpstat fw
command is to check the status of the firewall, using the methods and the results shown below, the name can be seen that packet firewall policy applied at that time, and the time delivered by the policy, the interface can also see some traffic information
Here Insert Picture Description
10 sessions number of view
to use this command fw ctl pstat can see the number of sessions the firewall at this time, the use of an input directly from the command line
Here Insert Picture Description
has a lot of information output, you can see the memory usage, at the bottom you can see the number of sessions NAT and use of
Here Insert Picture Description
synchronization status displays for this place off, because not doing cluster, if you do cluster formation High Availability, then the firewall synchronization status displays synchronization

Published 29 original articles · won praise 0 · Views 599

Guess you like

Origin blog.csdn.net/drrui520/article/details/104883573