topic Re: Run Clish commands fail on updated CP1570 in Spark Firewall (SMB)

Run Clish commands fail on updated CP1570

mischelw — Tue, 18 May 2021 14:46:44 GMT

I'm trying to run Clish commands, or get a list of assets (so I can find out the model type of the device) and it claims I cannot run an interactive command inside an interactive window (I'm using putty in this case), and should exit expert mode.

I exit expert mode and it claims it doesn't recognize Clish ...

What is going on ? any idea ?

Re: Run Clish commands fail on updated CP1570

G_W_Albrecht — Tue, 18 May 2021 15:00:50 GMT

This does usually work with other 15x0 units ?

Re: Run Clish commands fail on updated CP1570

mischelw — Tue, 18 May 2021 15:02:14 GMT

Don't know, I understood that this is the way to get some more info through cli from the device...

Re: Run Clish commands fail on updated CP1570

G_W_Albrecht — Tue, 18 May 2021 15:05:53 GMT

I would use the WebGUI that shows much information first. But i can see none of the CLISH commands that did not work 8)

Re: Run Clish commands fail on updated CP1570

PhoneBoy — Tue, 18 May 2021 15:07:08 GMT

What is the precise command(s) you are trying to execute?
Keep in mind that clish on the SMB appliances is somewhat different from regular gateways.
Sounds like you are trying to execute show asset, which is not supported on SMB appliances.
You can get similar information from show diag.
Maybe there's a better way to see the precise model number, but you can work it out from show license output as the license string contains the model number.

Re: Run Clish commands fail on updated CP1570

mischelw — Tue, 18 May 2021 15:13:57 GMT

none show command works. funny is that this is what I got from the support team.

Since I'm not getting the full bandwidth I was getting with my old CP790 I want to make sure this is the right model. no simple way to get the model number. in previous versions It was showing in the UI, now it just shows 1500 appliance....

Thanks!

Re: Run Clish commands fail on updated CP1570

G_W_Albrecht — Tue, 18 May 2021 15:34:00 GMT

Post a screenshot - it does show the model on my 1550:

Re: Run Clish commands fail on updated CP1570

mischelw — Tue, 18 May 2021 15:37:54 GMT

This is exactly why I'm troubled.... a friend of mine shows as well. this one, doesn't.

I've also upgraded to the latest r80.20.25. same....

Re: Run Clish commands fail on updated CP1570

PhoneBoy — Tue, 18 May 2021 15:38:03 GMT

Sounds like you've changed the default shell to bash (expert mode).
That said, cplic print from that prompt should tell you exactly since it's encoded in the license.
In this example, it's a 1590.

MyGW> cplic print
Host Expiration Features
127.0.0.1 never CPAP-AP1590 CPWIFI-US CPSB-FW CPSG-C-4-U CPSB-VPN CPSB-SSLVPN-200 CPSB-IA CPSB-ADNC CPSB-ADNC-M CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPAP-CLOUD-MGMT CK-00-XX-XX-XX-XX-XX

Also, it should show in the UI like so:

The only time I've personally seen issues like this is (the UI not showing the correct model number) is on pre-production units.
Perhaps its a different issue and an RMA might be required here.

Re: Run Clish commands fail on updated CP1570

mischelw — Tue, 18 May 2021 15:40:11 GMT

Thanks. I didn't activated the license yet, until I'm sure I got the right model.

It is still in trial, so probably see it under the lic is not relevant for me. (BTW, on my friends CP, he is also in trial, but it shows 1590)

Re: Run Clish commands fail on updated CP1570

PhoneBoy — Tue, 18 May 2021 15:46:19 GMT

Regardless, the fact this is not showing the correct device in the UI suggests this device is not burned with the correct data.
Highly recommend an RMA.

Re: Run Clish commands fail on updated CP1570

mischelw — Tue, 18 May 2021 15:52:13 GMT

Funny, out of the box, was sealed by checkpoint...

Re: Run Clish commands fail on updated CP1570

the_rock — Tue, 18 May 2021 16:04:29 GMT

So if you go to clish mode and hit tab, do you see all the options come up? If so, does it let you run any of the commands listed there at all?

Re: Run Clish commands fail on updated CP1570

mischelw — Tue, 18 May 2021 16:12:02 GMT

When I enter Clish:

You can't start interactive session from another interactive session.
Exit expert mode and return to clish.

Exit expert and Clish doesn't work at all.

Re: Run Clish commands fail on updated CP1570

the_rock — Tue, 18 May 2021 16:13:47 GMT

Odd...and if you do a reboot of the gateway, is it same problem?

Re: Run Clish commands fail on updated CP1570

mischelw — Tue, 18 May 2021 16:14:45 GMT

Yes

Re: Run Clish commands fail on updated CP1570

the_rock — Tue, 18 May 2021 16:17:13 GMT

Not sure if you seen below, but if not, it might be worth trying temporary workaround:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk108058

Re: Run Clish commands fail on updated CP1570

the_rock — Tue, 18 May 2021 18:16:49 GMT

Can you tell us if below procedure worked?

Re: Run Clish commands fail on updated CP1570

mischelw — Tue, 18 May 2021 18:20:07 GMT

Not sure it is relevant to my specific case, solution is from 2015, my device is from 2021 with latest firware, just too afraid to apply and to break something else...

Re: Run Clish commands fail on updated CP1570

the_rock — Tue, 18 May 2021 18:24:08 GMT

Thats true, but, if I were you, I would copy the content of that directory before doing anything though...maybe if you open official TAC case, they can confirm for you? I really dont want to take liberty here and say process would not break anything, as I have no clue if thats a fact.