topic Re: ha state details for VS,VSX,gateways from MDS in API / CLI Discussion

ha state details for VS,VSX,gateways from MDS

ram_kum — Thu, 16 Mar 2023 00:45:53 GMT

Hi,

I have been searching this on admin guide but could not find any answer so asking you all if there is any cmd/cmds available on MDS to collect ha state (active or passive) which includes ha state for virtual systems in VSX cluster and also ha state for VSX cluster from all the connected firewalls to MDS.

My initial approach is to use below script but due to internal permission issues i was not able to run it so i have to look for workaround

https://community.checkpoint.com/t5/Scripts/GAIA-Easy-execute-CLI-commands-on-all-gateways-simultaneously/td-p/50883

Thanks.

Re: ha state details for VS,VSX,gateways from MDS

cosmos — Thu, 16 Mar 2023 04:29:04 GMT

You could try just cprid_util on its own, rather than create all the scripts:

mdsenv <CMA>

cprid_util -server <gateway-ip> -verbose rexec -rcmd /bin/bash -s -c 'cphaprob stat'

Ideally this would be visible (and even controllable) from the console rather than combinations of cprid, clusterXL_admin and vsx_util vsls all needing at least SSH to the management server (vsx_util vsls will only tell you what's configured on management, not what is currently happening on the gateways).

Re: ha state details for VS,VSX,gateways from MDS

PhoneBoy — Thu, 16 Mar 2023 17:34:41 GMT

Curious if the following works for you (similar idea, but can be executed in SmartConsole): https://community.checkpoint.com/t5/SmartConsole-Extensions/Execute-Commands-SmartConsole-Extension/m-p/174703#M350
You can also use the "run script" functionality in SmartConsole to obtain information from managed gateways (albeit one at a time).