Working with Global Commands

The 61000/41000 Security System operating system includes a set of global commands that apply to all or specified SGMs in a system.

gclish commands apply globally to all SGMs by default. Some gclish commands are applicable to the 61000/41000 Security System and its components.

gclish commands do not apply to SGMs that are DOWN. If you run a set command while a SGM is DOWN, the command does not update that SGM. The SGM synchronizes its database during startup and applies the changes after reboot.

clish commands are documented in the R76 Gaia Administration Guide. Most of these commands are also available in the 61000/41000 Security System.

Notes

• Documentation for the Chassis feature is in the Hardware Monitoring and Chassis High Availability sections.
• auditlog is enabled by default. All commands are recorded in the audit log. To learn more about the audit log, see Looking at the Audit Log.
• config-lock is the command that protects the gclish database. The lock can be held by single SGM per system. When you try to do gclish set operations from a specific SGM, make sure that this SGM holds the config-lock. In order to acquire config-lock, run:

  # set config-lock on override

• gclish traffic runs on the Sync interface, port 1129/TCP.
• To run a command on specified SGMs, use the blade-range specification. When you use blade-range, all gclish embedded commands run only on this subset of SGMs. Because all SGMs must have identical configuration, we recommend that you do not use the blade-range command.