Run Clish commands fail on updated CP1570

[mischelw]

I'm trying to run Clish commands, or get a list of assets (so I can find out the model type of the device) and it claims I cannot run an interactive command inside an interactive window (I'm using putty in this case), and should exit expert mode.

I exit expert mode and it claims it doesn't recognize Clish ...

What is going on ? any idea ?

[G_W_Albrecht]

This does usually work with other 15x0 units ?

[mischelw]

Don't know, I understood that this is the way to get some more info through cli from the device...

[G_W_Albrecht]

I would use the WebGUI that shows much information first. But i can see none of the CLISH commands that did not work 😎

[PhoneBoy]

What is the precise command(s) you are trying to execute?
Keep in mind that clish on the SMB appliances is somewhat different from regular gateways.
Sounds like you are trying to execute show asset, which is not supported on SMB appliances.
You can get similar information from show diag.
Maybe there's a better way to see the precise model number, but you can work it out from show license output as the license string contains the model number.

[mischelw]

none show command works. funny is that this is what I got from the support team.

Since I'm not getting the full bandwidth I was getting with my old CP790 I want to make sure this is the right model. no simple way to get the model number. in previous versions It was showing in the UI, now it just shows 1500 appliance....

Thanks!

[G_W_Albrecht]

Post a screenshot - it does show the model on my 1550:

[mischelw]

This is exactly why I'm troubled.... a friend of mine shows as well. this one, doesn't.

I've also upgraded to the latest r80.20.25. same....

[PhoneBoy]

Sounds like you've changed the default shell to bash (expert mode).
That said, cplic print from that prompt should tell you exactly since it's encoded in the license.
In this example, it's a 1590.

MyGW> cplic print
Host             Expiration  Features            
127.0.0.1        never       CPAP-AP1590 CPWIFI-US CPSB-FW CPSG-C-4-U CPSB-VPN CPSB-SSLVPN-200 CPSB-IA CPSB-ADNC CPSB-ADNC-M CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPAP-CLOUD-MGMT CK-00-XX-XX-XX-XX-XX

Also, it should show in the UI like so:

The only time I've personally seen issues like this is (the UI not showing the correct model number) is on pre-production units.
Perhaps its a different issue and an RMA might be required here. 

[mischelw]

Thanks. I didn't activated the license yet, until I'm sure I got the right model.

It is still in trial, so probably see it under the lic is not relevant for me. (BTW, on my friends CP, he is also in trial, but it shows 1590)

[PhoneBoy]

Regardless, the fact this is not showing the correct device in the UI suggests this device is not burned with the correct data.
Highly recommend an RMA.

[mischelw]

Funny, out of the box, was sealed by checkpoint...

[the_rock]

So if you go to clish mode and hit tab, do you see all the options come up? If so, does it let you run any of the commands listed there at all?

[mischelw]

When I enter Clish:

You can't start interactive session from another interactive session.
Exit expert mode and return to clish.

Exit expert and Clish doesn't work at all.

[the_rock]

Odd...and if you do a reboot of the gateway, is it same problem?

[mischelw]

Yes

[the_rock]

Not sure if you seen below, but if not, it might be worth trying temporary workaround:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[the_rock]

Can you tell us if below procedure worked?

[mischelw]

Not sure it is relevant to my specific case, solution is from 2015, my device is from 2021 with latest firware, just too afraid to apply and to break something else...

[the_rock]

Thats true, but, if I were you, I would copy the content of that directory before doing anything though...maybe if you open official TAC case, they can confirm for you? I really dont want to take liberty here and say process would not break anything, as I have no clue if thats a fact.

[mischelw]

Will do so. thanks!

[the_rock]

Please keep us posted, because I know issues like this can be very frustrating.

[mischelw · Accepted solution]

All started to work as soon as I activated the license of the device, including it now shows the correct device model type (in my case 1570).

Seems that when the device is not activated it shows a general 1500 type as the hardware is the same, its just a matter of license which gives it identity.

Thanks all for trying to assist.

[the_rock]

Interesting...good to know!!

[G_W_Albrecht]

I woulddare to not post any issue while exploring an unlicensed device 😎 Come on - you surely know you can not work with a unit that is not activated at all! You could simply use the PnP Eval license for some time, too.

Your guess is good - the license restricts the enabled CPU cores and thruput, this is true! But only the hardware of 1570 and 1590 models is the same, and of 1530 / 1550 models - but not for all four 1500, see for yourself the hardware differences in the data sheet !

[mischelw]

I was using the trial license, not an unlicensed device (some credit , please !). the idea of the trial license is to check everything works as expected and then you can activate (in case device doesn't meet the expectations, is not usable as expected, etc).

What was misleading is that I have a college with the same device and it was showing 1590 even though it was still in trial license. this is what puzzled me and why I asked here the forum so I can get some insight.

I know exactly the difference between models, and that is exactly why I chose the 1570 and not the 1590 to my needs.

[G_W_Albrecht]

Sorry, You did not write that before 😎 - and indeed, with the trial active you can use all features for the restricted time, a model e.g. 1570 is shown and your issues should not have occured at all ! You must be the victim of some bug o.s.e., this is not the standard behaviour !

[Tom_Hinoue]

Maybe your college was using an old firmware like R80.20.01/R80.20.02?
I remember the first releases showed CP1550/CP1590 out of the box, since CP1530/CP1570 model was not fully supported back then, which may explain the issue.

It should be from around R80.20.02 or R80.20.05 where the First Time Wizard and the logo in WEB UI expression was changed to [1500], where after activation the correct model (1530/1550/1570/1590) is shown.

Hope it answers your question.

[G_W_Albrecht]

That is very interesting and explains why model number was not shown - but not the clish command issues that were experienced !

[Tom_Hinoue]

@G_W_Albrecht 
haha, totally missed the original issue after all the comments XD

@mischelw 
but it sounds like to me your experiencing the error (interactive session error) that occurs when trying to run single clish command like "clish -c show version" after entering expert from a existing clish shell...

after login...
1. default shell (clish)
2. enter expert mode
3. run "clish -c show..."

in this case, the clish should run in (1.) (plain console/SSH login), or else bashUser needs to be enabled for running "clish"