topic Re: Restart vpnd and iked process on maestro virtual system in Hyperscale Firewall (Maestro)

Restart vpnd and iked process on maestro virtual system

rahulctg — Tue, 19 Nov 2024 10:43:53 GMT

Hi,

How can restart the vpnd and iked processes on a Maestro Virtual System?

Thanks!

Re: Restart vpnd and iked process on maestro virtual system

AkosBakos — Tue, 19 Nov 2024 10:46:39 GMT

You want to restart the vpnd with one command on all SGMs in the same time?

Akos

Re: Restart vpnd and iked process on maestro virtual system

rahulctg — Tue, 19 Nov 2024 10:48:49 GMT

Hello,

yes, that would work. Currently, there is no active vpn but there is active non-vpn traffic.

Re: Restart vpnd and iked process on maestro virtual system

AkosBakos — Tue, 19 Nov 2024 11:05:22 GMT

Do you have lot SGMs?

If no, the one by one method should work 🙂 and safe.

There are GLOBAL commands with prefix, but I never did this way, from vpnd point of view.

https://support.checkpoint.com/results/sk/sk102735

Akos

Re: Restart vpnd and iked process on maestro virtual system

rahulctg — Tue, 19 Nov 2024 11:14:31 GMT

Actually, I was looking for something in between cpstop/cpstart and killing individual processes on each sgm to make life easier;o). For eg., according to check point documentation vpnd spawned by the FWD daemon. So I was wondering if there are options related with fwd that could it.

On the other hand, I'm also wondering now if this can be done only on global level or we can limit it to a specific virtual system too, if desired.

Re: Restart vpnd and iked process on maestro virtual system

AkosBakos — Tue, 19 Nov 2024 12:11:41 GMT

I sent you a private message

Re: Restart vpnd and iked process on maestro virtual system

emmap — Wed, 20 Nov 2024 02:09:06 GMT

Supported options for restarting processes are available here:

https://support.checkpoint.com/results/sk/sk97638

For something like vpnd, as it's a core infra process and it would take out the VS, it's basically down to restarting the whole VS.