Difference between revisions of "Nokia IPSO clish config example"

From cpwiki.net
Jump to: navigation, search
Check Point Profressional Services
Line 14: Line 14:
 
<br>clish -c "add interface eth-s1p2 vlanid 100"            <<< this creates logical interface named eth-s1p2c1
 
<br>clish -c "add interface eth-s1p2 vlanid 100"            <<< this creates logical interface named eth-s1p2c1
 
<br>clish -c "add interface eth-s1p2c1 address 192.168.1.2/27"
 
<br>clish -c "add interface eth-s1p2c1 address 192.168.1.2/27"
 +
<br>clish -c "add interface eth-s1p2 vlanid 200"
 +
<br>clish -c "add interface eth-s1p2c2 address 192.168.100.2/27"
  
 
<br>clish -c "set mcvr vrid 10 priority 95"
 
<br>clish -c "set mcvr vrid 10 priority-delta 10"
 
 
<br>clish -c "add mcvr vrid 10 backup-address 192.168.1.1"
 
<br>clish -c "add mcvr vrid 10 backup-address 192.168.1.1"
 +
<br>clish -c "add mcvr vrid 10 backup-address 192.168.100.1"
  
 
echo "adding routes"
 
echo "adding routes"

Revision as of 03:58, 11 May 2014


clish -c "set interface eth1 active on"
clish -c "set interface eth1 duplex full"
clish -c "set interface eth1 speed 1000M"
clish -c "add interface eth1c0 address 10.0.0.2/28"



clish -c "set mcvr vrid 10 priority 95"
clish -c "set mcvr vrid 10 priority-delta 10"
clish -c "add mcvr vrid 10 backup-address 10.0.0.1"


clish -c "set interface eth-s1p2 active on"
clish -c "set interface eth-s1p2 duplex full"
clish -c "set interface eth-s1p2 speed 1000M"
clish -c "add interface eth-s1p2 vlanid 100" <<< this creates logical interface named eth-s1p2c1
clish -c "add interface eth-s1p2c1 address 192.168.1.2/27"
clish -c "add interface eth-s1p2 vlanid 200"
clish -c "add interface eth-s1p2c2 address 192.168.100.2/27"


clish -c "add mcvr vrid 10 backup-address 192.168.1.1"
clish -c "add mcvr vrid 10 backup-address 192.168.100.1"

echo "adding routes"

clish -c "set static-route default nexthop gateway address 10.0.0.1 priority 1 on"
clish -c "set static-route 10.124.0.0/15 nexthop gateway address 10.0.0.1 on"

clish -c "add arpproxy address 192.168.1.10 macaddress 00:00:5e:00:01:69"

clish -c "set vrrp accept-connections on"
clish -c "set vrrp monitor-firewall off"
clish -c "set vrrp coldstart-delay 90"
clish -c "save config"