FireWall-1 FAQ: Command Line Reference for IPSO
Please note: This content was from when I was operating my FireWall-1 FAQ site, which I stopped operating in August 2005. For some reason people still have links to this stuff on the Internet that people are still clicking on.
I am making this information available again AS IS. Given how old this information is, it is likely wildly inaccurate. I have no plans to update this information.
If you're still running versions of Check Point VPN-1/FireWall-1 where this information is still relevant to you, do yourself a favor and upgrade to a more recent release. If you happen to be running a current release and the information is useful, it's by happenstance :)
There are two command lines in IPSO:
-
The kind provided by csh/sh. The commands present here are generally only useful for troubleshooting purposes. Some commands like route, arp, ifconfig, etc are available, but cannot be used to configure the platform. ipsctl is present, it works similar to sysctl (i.e. used to tweak certain OS parameters). The man pages for all other Unix commands can found in the man pages for FreeBSD 2,2,6.
-
The kind provided by clish, present in IPSO 3.6 and later. Commands in clish can be used to configure the platform. The initial design of clish in IPSO was for scripting and other forms of automated configuration versus “interactive” use, so it might be a little rough. Nokia provides a Command Line Reference Guide on the Nokia Support site. Note that this Command Line Reference Guide only refers to commands available via clish, not the standard Unix commands.
