VSX Commands

This section describes the vsx commands.

Note - fw6 vsx commands are not supported.

Included Topics

vsx fetch

Description

Fetches the most current configuration files from the Main Domain Management Server, and applies it to the VSX Gateway.

Syntax

vsx fetch [-v] [-q] [-s] local

vsx fetch [-v | -q| -s] [-f conf_file]

vsx fetch [-v | -q] -C "command"

vsx fetch [-v | -q| -c| -n| -s] [management]

Parameters

Parameter	Description
-c	Cluster mode
-n	Do not run `local.vsall` if VSX configuration, as fetched from management server, is up-to-date.
-s	Concurrent fetches for multi-processor environment.
-q	Quiet mode - Only summary lines appear.
-v	Verbose mode - Detailed information appears.
-f conf_file	Fetches NCS commands configuration file instead of the default `local.vsall`.
local	Reads `local.vsall` configuration file from `$FWDIR/state/local/vsx` and executes the NCS
management	Fetches `local.vsall` from management, replaces and runs it.
-C command	Execute NCS command

Return Value

0 (zero) indicates that the command executed successfully. Any other response indicates an error.

Output

fw vsx fetch

Fetching VSX Configuration From: 10.18.99.101

Local VSX Configuration is Up-To-Date.

Cleaning un-used Virtual Systems entries (local.vskeep).

Purge operation succeeded.

Fetching Virtual Systems configuration file (local.vsall).

SecureXL device has been enabled for vsid 1

SecureXL device has been enabled for vsid 2

SecureXL device has been enabled for vsid 3

Virtual Systems configuration file installed successfully

vsx fetchvs

Description

Retrieves a specific Virtual System configuration file based on information stored locally on the gateway.

Syntax

vsx fetchvs [-v | -q] [<vs name> | <vs ID>]

Parameters

Parameter	Description
-q	Quiet output. Only summary information appears.
-v	Verbose output. Detailed information appears.
`<vs name>`\| <vs ID>	Enter the Virtual System name or ID.

Return Value

0 (zero) indicates that the command executed successfully. Any other response indicates an error.

Example

fw vsx fetchvs California

Output

fw vsx fetchvs 2

SecureXL device has been enabled for vsid 2

vsx stat

Description

Displays VSX status information.

Syntax

vsx stat [-v] [-l] [<vsid>]

Parameters

Parameter	Description
`-v`	Displays detailed (verbose) information.
-l	Displays a detailed list of all Virtual Devices.
<vsid>	Displays statistics for the specified Virtual System

Output

VSX Gateway Status

==================

Name: MyGateway
Security Policy: MyGateway_VSX
Installed at: 10Dec2007 10:31:25
SIC Status: Trust

Number of Virtual Systems allowed by license:100

Virtual Systems [active/configured]: 2/2

Virtual Routers and Switches [active/configured]:1/1

Total connections [current/limit} 4/46000

Virtual Devices Status
======================

ID | Type & Name | Security Policy | Installed at | SIC

-----+-------------+-----------------+----------------+------

1 | W VSW_1 |<Not Applicable> | | Trust

2 | S VS1 |Standard | 10Apr2005 10:31| Trust

3 | S VSs2 |Standard | 10Apr2005 10:31| Trust

Type: S - Virtual System, B - Virtual System in Bridge mode,

R - Virtual Router, W - Virtual Switch,

? - Information unavailable.

Output for a specific Virtual System

[Expert@sun:51]# vsx stat -l 51

VSID: 51

VRID: 51

Type: Virtual System

Name: sun_mem_vs49

Security Policy: TDCH-FW08.OPA

Installed at: 29Jul2009 12:37:58

SIC Status: Trust

Connections number: 0

Connections peak: 0

Connections limit: 15000

vsx sic reset

Description	Resets SIC for the Virtual System. Run `vsenv <vsid>` to change context and show an interface list for a different Virtual System.
Syntax	`vsx sic reset`

Example

vsenv 1

vsx sic reset

Output

resetting SIC for VSID 1

Note - On the management server, use the cpca_client revoke_cert command to cancel the old certificate. In SmartDashboard, open the Virtual System object for editing. Click OK. This action creates a new certificate, and transfers the certificate to the gateway.