Enhancing CLISH with Dynamic CLI

by Rick · January 21, 2019

Check Point released a new tool today called Dynamic CLI to enhance CLISH with new commands. This might eliminate the need to access Expert mode for certain roles you may have in your team. It’s available as a tarball for R80.10 and higher and does not conflict with Jumbo Hotfixes. It can be installed on the following setups:

Management Server
Multi-Domain Server
Gateway / Cluster / VSX
Appliance / VM

Dynamic CLI will only add new “show” commands that replaces the equivalent Expert commands. A reboot is advised but you can also restart CLISH to enable Dynamic CLI as stated here on CheckMates by entering the following commands:

# tellpm process:clishd
# tellpm process:clishd t
# tellpm process:clish
# tellpm process:clish t

The tables below show you the new commands that will be available in CLISH when Dynamic CLI is installed. Read more about Dynamic CLI in sk144112.

Security Gateway

CLISH Command	Equivalent “Expert” Command
show security-gateway policy	fw stat
show security-gateway policy summary	fw stat -s
show security-gateway policy details	fw stat -l
show security-gateway version	fw ver
show security-gateway memory statistics	fw ctl pstat
show security-gateway arp-table	fw ctl arp -n
show security-gateway arp-table resolved	fw ctl arp
show security-gateway affinity	fw ctl affinity -l -v -a
show security-gateway affinity cpu-ordered	fw ctl affinity -l -r -v -a
show security-gateway affinity statistics	fw ctl multik stat
show security-gateway monitored-interfaces	fw getifs
show security-gateway monitored-interfaces all	fw ctl iflist
show security-gateway parameter integer VALUE	fw ctl get int VALUE
show security-gateway parameter string VALUE	fw ctl get str VALUE
show security-gateway log-files	fw lslogs
show security-gateway tables	fw tab -s
show security-gateway tables search VALUE	fw tab -s \| grep -i VALUE
show security-gateway table VALUE	fw tab -t VALUE
show security-gateway table VALUE summary	fw tab -t VALUE -s
show security-gateway table VALUE formatted	fw tab -t VALUE -f
show security-gateway ips status	ips stat

Acceleration

CLISH Command	Equivalent “Expert” Command
show securexl status	fwaccel stat
show securexl statistics	fwaccel stats
show securexl connections	fwaccel conns
show securexl version	fwaccel ver
show multi-queue affinity	cpmq get -a
show multi-queue driver-type VALUE	cpmq get rx_num VALUE

System

CLISH Command	Equivalent “Expert” Command
show system services run-level	chkconfig –list
show system service VALUE run-level	chkconfig –list VALUE
show system init-services	service –status-all
show system init-service VALUE	service VALUE status
show system disk usage	df -h
show system disk hw-raid status	raidconfig status
show system disk sw-raid status	raid_diagnostic
show system dmi-table	dmidecode \| more
show system dmi-table search VALUE	dmidecode \| grep -i VALUE \| more
show installer cpinfo	cpinfo -y all
show file VALUE	more VALUE
show file VALUE search VALUE	cat VALUE \| grep -i VALUE \| more
show users-access-log	last -a

Monitoring

CLISH Command	Equivalent “Expert” Command
show syslog logs	cat /var/log/messages \| more
show syslog logs search VALUE	cat /var/log/messages \| grep -i VALUE \| more
show syslog logs monitor	tail -f /var/log/messages
show syslog dmesg	dmesg \| more
show syslog dmesg search VALUE	dmesg \| grep -i VALUE \| more

Interfaces

CLISH Command	Equivalent “Expert” Command
show interface VALUE features	ethtool -k VALUE
show interface VALUE driver-information	ethtool -i VALUE
show interface VALUE coalesce	ethtool -c VALUE
show interface VALUE pause-parameter	ethtool -a VALUE
show interface VALUE stats	ethtool -S VALUE