CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have 52 attendees signed up from 14 countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 8/25, 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 Platforms > Nokia And IPSO
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2005-12-01
Youngy Youngy is offline
Member
 
Join Date: 2005-09-20
Posts: 83
Rep Power: 3
Youngy has an average reputation (10+)
Default Nokia IPSO Command Line

Hi Guys,

Does anyone know a link\site or other resource for all the commands that can be used on a Nokia IPSO at the CLI.

Thanks for your time
Reply With Quote
  #2 (permalink)  
Old 2005-12-01
Sergej Sergej is offline
Senior Member
 
Join Date: 2005-11-21
Location: Europe, Lithuania
Posts: 291
Rep Power: 3
Sergej has an average reputation (10+)
Default Re: Nokia IPSO command line

Nokia has perfect documentation, but all is hidden in support site under www.nokia.com/support -> "Support for Business Products". You need to have a login, and one of you appliances serial numbers to download something.
You can also look inside documentation CD (shipped with any IPSO platform).
CLI is described in "CLI Reference Guide for Nokia IPSO X.X"
Reply With Quote
  #3 (permalink)  
Old 2005-12-06
Youngy Youngy is offline
Member
 
Join Date: 2005-09-20
Posts: 83
Rep Power: 3
Youngy has an average reputation (10+)
Default Re: Nokia IPSO command line

Thanks Sergej,

I managed to find the pdf you mentioned on the disk (after I found the disk that is) which is great. Thanks for the advice.
Reply With Quote
  #4 (permalink)  
Old 2006-03-01
IaKing IaKing is offline
Junior Member
 
Join Date: 2006-03-01
Posts: 9
Rep Power: 0
IaKing has an average reputation (10+)
Default Re: Nokia IPSO command line

If you're looking to automate command line tasks that voyager completes that are not referenced in the command line pdf. The best way is to change the logging settings to "logging of transient and permanant changes".

Then any commands undertaken by voyager (and clish too i think) are spewed into syslogs.

I found this very usefull for figuring out how to do a lot of what voyager or clish does.. on the command line.

-- Iain
Reply With Quote
  #5 (permalink)  
Old 2006-03-01
Sergej Sergej is offline
Senior Member
 
Join Date: 2005-11-21
Location: Europe, Lithuania
Posts: 291
Rep Power: 3
Sergej has an average reputation (10+)
Default Re: Nokia IPSO command line

Nice trick, IaKing
Reply With Quote
  #6 (permalink)  
Old 2006-03-02
Youngy Youngy is offline
Member
 
Join Date: 2005-09-20
Posts: 83
Rep Power: 3
Youngy has an average reputation (10+)
Default Re: Nokia IPSO command line

I have to figure out how to get the syslogs going then........so much to learn!
Reply With Quote
  #7 (permalink)  
Old 2006-03-03
IaKing IaKing is offline
Junior Member
 
Join Date: 2006-03-01
Posts: 9
Rep Power: 0
IaKing has an average reputation (10+)
Default Re: Nokia IPSO command line

Yeah, not entirely suprisingly.. most of the commands are made using dbset (thats in 3.6 btw, I haven't tried it with 4). The whole voyager is changed in 4 (much much better IMHO), there also appears to be more of an emphasis on clish too so it might be different now.

-- IaKing
Reply With Quote
  #8 (permalink)  
Old 2006-08-29
_d3nx _d3nx is offline
Junior Member
 
Join Date: 2006-04-05
Location: VAN
Posts: 24
Rep Power: 0
_d3nx has an average reputation (10+)
Default Re: Nokia IPSO command line

Unix commands supported by ipso

rm filename
Removes the file "filename"

cp file1 file2
Makes a copy of file1 and names file2

mv file1 directory
Moves "file1" to "directory"

pwd
Print working directory name

rmdir directory
Remove directory called "directory"

ls
List directory contents (use -al switch from details)

find / -name filespec -print
Begin a search in the root directory and all subdirectories for the file named "filespec"

ps -awux
Report all active processes in the kernel

ipsofwd on admin
Enables IP forwarding

uptime
Show how long system has been running

tail filename
Display the last part of a file called "filename"

cat filename
Concatenate and print files called "filename"

netstat -rn
Show the routing table

arp -an
Displays contents of ARP cache

tcpdump parameters
Displays traffic on a network.

traceroute 10.1.1.1
Print the route packets take to host 10.1.1.1

tar -cvf newarchive.tar dirname
Used to create the tar archive named newarchive.tar containing the contents of directory dirname

tar -tvf newarchive.tar
Lists the contents of newarchive.tar without decompressing

gzip newarchive.tar
Compresses the file newarchive.tar.

tar -zvxf newarchive.tar.gz
Used to decompress and untar an archive created by tar and compressed by gzip.

cron
Daemon that executes scheduled commands or script.

date
Display or set date and time.

df
Display free disk space (-a shows all mount points).

vi textfile
Allows the editing of file called "textfile".

mkdir directoryname
Make directory called "directoryname".

chmod xxx
Change file modes [ who::= a | u | g | o symbols ``u'', ``g'', and ``o'' specify the user, group, and other parts of the mode bits, respectively. The who symbol ``a'' is equivalent to ``ugo''. For example, chmod 777 will give full permissions to all].

ifconfig -a
Display interface information from the command line.

ipsoinfo
IPSO information gathering utility. (note: fwinfo is included in the information generated by ipsoinfo).

touch
Utility that sets the modification and access times of files to the current time of day. If the file doesn't exist, it is created with default permissions.

mount -a
Mount all HD partitions (single user mode).

mount -o rw /dev/wd0f
Mount /partition for read/write.
Reply With Quote
  #9 (permalink)  
Old 2006-09-29
EdinburghKev EdinburghKev is offline
Member
 
Join Date: 2006-09-26
Location: Scotland
Posts: 32
Rep Power: 0
EdinburghKev has an average reputation (10+)
Default Re: Nokia IPSO command line

A handy CLI command is fw ctl iflist which lists just the interface names. Handy for the -i switch when running a tcpdump to make sure you have the correct interface name. Sometimes it can take an age to find the interface name from ifconfig -a.
Reply With Quote
  #10 (permalink)  
Old 2006-10-18
IaKing IaKing is offline
Junior Member
 
Join Date: 2006-03-01
Posts: 9
Rep Power: 0
IaKing has an average reputation (10+)
Default Re: Nokia IPSO Command Line

Hmm, pretty much all unix "commands" will work on ipso (its a stripped down freebsd you know).

-- Iain
Reply With Quote
  #11 (permalink)  
Old 2007-05-04
vanlang vanlang is offline
Junior Member
 
Join Date: 2007-04-10
Posts: 11
Rep Power: 0
vanlang has an average reputation (10+)
Default Re: Nokia IPSO Command Line

Here is the manual of Nokia IPSO
http://www.wideknowledge.net/nokiaipso/index.htm
Reply With Quote
  #12 (permalink)  
Old 2007-07-03
karimbruxelles karimbruxelles is offline
Junior Member
 
Join Date: 2007-07-02
Posts: 1
Rep Power: 0
karimbruxelles has an average reputation (10+)
Default Re: Nokia IPSO Command Line

Hello Guys,

I can't find the Nokia IPSO Command line
does anyone have got a copy in PDF?
It was suppose to be on this website
" http://www.wideknowledge.net/nokiaipso/index.htm"
however it 's not available anymore

Thanks
Reply With Quote
  #13 (permalink)  
Old 2007-08-30
mheldens mheldens is offline
Junior Member
 
Join Date: 2007-08-29
Posts: 12
Rep Power: 0
mheldens has an average reputation (10+)
Default Re: Nokia IPSO Command Line

Hi,

I'm also looking for a CLI manual/list for IPSO.

At a custumor site we have an IP350 with CP R61, SmartCenterServer en Firewall module are on the same machine.
Yesterday i have the trouble that the SmartCenterServer did't respond to anything. Is it possible to restart ONLY the SmartCenterServer service?
I resolved the problem with a CPrestart which restarted all of de Checkpoint Services. But can i just restart ONE service???

That's why i'm looking for the CLI manual.

So if someone has one.........

Thanks

Maarten
Reply With Quote
  #14 (permalink)  
Old 2007-08-30
Tan Da Boss Tan Da Boss is offline
Member
 
Join Date: 2007-04-11
Location: Paris, France
Posts: 63
Rep Power: 2
Tan Da Boss has an average reputation (10+)
Send a message via MSN to Tan Da Boss
Default Re: Nokia IPSO Command Line

Hi,

I've just been on Nokia website and the CLI doc is there.
mheldens you should take a look on Check Point website, you will find the CLI ref guide from Check Point.
On a standalone environment (FW & mgmt on the same module) all the services are binded so I don't think it is possible to only restart the smartcenter.

Tan
Reply With Quote
  #15 (permalink)  
Old 2007-08-30
mheldens mheldens is offline
Junior Member
 
Join Date: 2007-08-29
Posts: 12
Rep Power: 0
mheldens has an average reputation (10+)
Default Re: Nokia IPSO Command Line

Quote:
Originally Posted by Tan Da Boss View Post
Hi,

I've just been on Nokia website and the CLI doc is there.
mheldens you should take a look on Check Point website, you will find the CLI ref guide from Check Point.
On a standalone environment (FW & mgmt on the same module) all the services are binded so I don't think it is possible to only restart the smartcenter.

Tan
Thanx Tan for checking. I found the CLI reference for Checkpoint and i created an account with Nokiabusiness.com to get the reference for IPSO.
Also i think it isn't possible the only restart the smartcenter.

Maarten
Reply With Quote
  #16 (permalink)  
Old 2007-11-14
vanlang vanlang is offline
Junior Member
 
Join Date: 2007-04-10
Posts: 11
Rep Power: 0
vanlang has an average reputation (10+)
Default Re: Nokia IPSO Command Line

Quote:
Originally Posted by karimbruxelles View Post
Hello Guys,

I can't find the Nokia IPSO Command line
does anyone have got a copy in PDF?
It was suppose to be on this website
" http://www.wideknowledge.net/nokiaipso/index.htm"
however it 's not available anymore

Thanks
Hello guy,
Sry because my site downed for a long time. Now i reupload at
http://www.wideknowledge.net/nokiaipso/index.html
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 04:05.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0