Check Point - VSX Command Reference

List of Check Point VSX commands.

Command	Description
vsx stat [-v] [-l] [id]	Show VSX status. Verbose with -v, interface list with -l or status of single VS with VS ID <id>.
show virtual-system all	List all VS with their VS ID and name.
vsx get vsenv	View current shell context. Second line applies to VSX on R75.40VS and up.
vsx set <id> vsenv <id>	Set context to VS with the ID <id>. Second line applies to VSX on R75.40VS and up.
set virtual-system <id>	Set context to VS ID <id>.
fw -vs <id> unloadlocal vsenv <id>; fw unloadlocal	Unload policy from a VS. To unload policies on all VS use fw vsx unloadall.
vsx sic reset <id> vsenv <id>; fw vsx sicreset	Reset SIC for VS <id>. For details see sk34098. Second line applies to VSX on R75.40VS and up.
cpinfo -x <id>	Start cpinfo collecting data for VS ID <id>.
vpn -vs <id> debug trunc	Empty & stamp logs, enable IKE & VPN debug.
fw -vs <id> getifs vsenv <id>; fw getifs	View driver interface list for a VS. You can also use the VS name instead of -vs <id>.
fw tab -vs <id> -t <table> vsenv <id>; fw tab -t <table>	View state tables for virtual system <id>. Second line applies to VSX on R75.40VS and up.
vsx vspurge	Remove unused VSX systems and fetch VS config.
fw monitor -v <id> -e 'accept;'	View traffic for virtual system with ID <id>. Attn: with fw monitor use -v instead of -vs.
cphaprob -vs <id> state	View HA state for Virtual System id when “Per Virtual System HA” mode is configured.
cphaprob -vs <id> register	Register a faildevice and switch VS <id> to the next cluster member (only in Per VS HA/VSLS).
$linux_command -z <id> traceroute -Z <id>	In R68 set context for ifconfig, ip, arp, ping or netstat. Uppercase “Z” for traceroute.