topic Re: Static Routes in VS in Firewall and Security Management

Static Routes in VS

Matlu — Wed, 11 Jun 2025 23:24:24 GMT

Hello,
Is there a way to create many static routes by a script for a VSX environment?
We have quite a large list of static routes that we need to create in some instances (VS) of our VSX Cluster, and we want to know if we can use some “automated” to accomplish this task.
Thanks for your recommendations.

Re: Static Routes in VS

the_rock — Wed, 11 Jun 2025 23:32:09 GMT

Maybe script like below?

#!/bin/bash

# Set the VSID you want to configure
VSID=3
vsenv $VSID

# Define your routes as destination/gateway/interface
ROUTES=(
"10.0.1.0/24 192.168.1.1 eth1"
"10.0.2.0/24 192.168.1.2 eth2"
"10.0.3.0/24 192.168.1.3 eth3"
)

for ROUTE in "${ROUTES[@]}"; do
set -- $ROUTE
DEST=$1
GW=$2
IFACE=$3

clish -c "add static-route $DEST nexthop gateway address $GW on interface $IFACE"
done

clish -c "save config"

Re: Static Routes in VS

Chris_Atkinson — Thu, 12 Jun 2025 00:07:04 GMT

Static routes are not configurable (supported) via CLI for VSX locally on the gateway, this information is deployed via Management.

Also one of the advantages of VSnext was API parity.

Re: Static Routes in VS

the_rock — Wed, 11 Jun 2025 23:38:44 GMT

Im pretty positive you can (I had done it before), but cant recall exactly how...had to do some changes via vsx_provisioning_tool on mgmt first.

Andy

Re: Static Routes in VS

Matlu — Wed, 11 Jun 2025 23:39:30 GMT

So, there is no “automated” way to accomplish this task?

You can only manually (1x1) configure the routes through the SmartConsole?

Re: Static Routes in VS

Chris_Atkinson — Wed, 11 Jun 2025 23:44:13 GMT

Explore the Vsx provisioning tool on MGMT i.e.

https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_VSX_AdminGuide/Topics-VSXG/CLI/vsx_provisioning_tool-Adding-Route.htm?tocpath=Command%20Line%20Reference%7Cvsx_provisioning_tool%7Cvsx_provisioning_tool%20Commands%7C_____13

Re: Static Routes in VS

Chris_Atkinson — Thu, 12 Jun 2025 02:03:19 GMT

There is no API only the vsx_provisioning_tool (which you can use in batches) that I posted a link to that is run from the Mgmt.

Refer: https://www.youtube.com/watch?v=Tbgg64zB-vk by @Magnus-Holmberg

Re: Static Routes in VS

the_rock — Thu, 12 Jun 2025 00:08:37 GMT

Definitely no API bro.

Andy

Re: Static Routes in VS

_Val_ — Thu, 12 Jun 2025 07:21:43 GMT

Nope, the only correct way is to set routes on the MGMT side. VSX provisioning tool is the answer, if you want to set many routes.