Nokia IPSO clish config example

From cpwiki.net
Revision as of 03:42, 11 May 2014 by Nighthawk (Talk | contribs)

Jump to: navigation, search
Check Point Profressional Services

clish -c "set interface eth-s1p1 active on"

clish -c "set interface eth-s1p1 duplex full"

clish -c "set interface eth-s1p1 speed 1000M"

clish -c "add interface eth-s1p1c0 address 10.4.16.1/30"

clish -c "set interface eth-s1p2 active on"

clish -c "set interface eth-s1p2 duplex full"

clish -c "set interface eth-s1p2 speed 1000M"

clish -c "add interface eth-s1p2 vlanid 100" <<< this creates logical interface named eth-s1p2c1

clish -c "add interface eth-s1p2c1 address 192.168.1.1/27"


clish -c "set mcvr vrid 10 priority 95"

clish -c "set mcvr vrid 10 priority-delta 10"

clish -c "add mcvr vrid 10 backup-address 192.168.1.1.75"


clish -c "set interface eth1 active on"

clish -c "set interface eth1 duplex full"

clish -c "set interface eth1 speed 1000M"

clish -c "set interface eth1c0 logical-name eth1c0"

clish -c "add interface eth1c0 address 10.0.0.9/28"


clish -c "set mcvr vrid 10 priority 95"

clish -c "set mcvr vrid 10 priority-delta 10"

clish -c "add mcvr vrid 10 backup-address 10.0.0.9"


echo "adding routes"


clish -c "set static-route default nexthop gateway address 10.0.0.1 priority 1 on"

clish -c "set static-route 10.124.0.0/15 nexthop gateway address 10.0.0.1 on"

clish -c "add arpproxy address 171.161.228.129 macaddress 00:00:5e:00:01:69"


clish -c "set vrrp accept-connections on"

clish -c "set vrrp monitor-firewall off"

clish -c "set vrrp coldstart-delay 90"

clish -c "save config"

Retrieved from "http://www.cpwiki.net/index.php?title=Nokia_IPSO_clish_config_example&oldid=448"