Global Operating System Commands

Global operating system commands are standard Linux commands that run on all or specified Security Group A logical group of Security Appliances that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. Every Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected. Members. When you run a global command in the Gaia gClish The name of the global command line shell in Check Point Gaia operating system for Security Appliances connected to Check Point Quantum Maestro Orchestrators. Commands you run in this shell apply to all Security Appliances in the Security Group., the operating system runs a global script that is the standard Linux command on the Security Group Members. When you run a command in the Expert mode, it works as a standard Linux command. To use the global command in the Expert mode, run the global command script version as shown in this table:

Gaia gClish Command	Global Command in the Expert Mode
`arp`	`g_arp`
`cat`	`g_cat`
`cp`	`g_cp`
`dmesg`	`g_dmesg`
`ethtool`	`g_ethtool`
`ls`	`g_ls`
`md5sum`	`g_md5sum`
`mv`	`g_mv`
`netstat`	`g_netstat`
`reboot`	`g_reboot`
`tail`	`g_tail`
`tcpdump`	`g_tcpdump`
`ifconfig`	`asg_ifconfig`
`top`	`g_top`

Note - The parameters and options for the standard Linux command are available for the global command. You can use one or more flags. However, do not use the -l and -r flags together.

Syntax

{<Gaia gClish Command> | <Global Command>} [-b <SGM_IDs>] [<Command Options>]

Parameters

Parameter	Description
`-b <SGM_IDs>`	Applies to Security Group Members as specified by `<SGM_IDs>`. `<SGM_IDs>` can be: No `<SGM_IDs` > specified, or `all` - Applies to all Security Group Members and Sites One Security Group Member (for example, `1_1`) A comma-separated list of Security Group Members (for example, `1_1,1_4`) A range of Security Group Members (for example, `1_1-1_4`) In Dual Site, one Site (`chassis1`, or `chassis2`) In Dual Site, the Active Site (`chassis_active`) Note - With this option you can only select Security Group Members from one Site.
`<Gaia gClish Command>`	Standard command in Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. gClish.
`<Global Command>`	Global command in the Expert mode as shown in the table above.
`<Command Options>`	Standard command options for the specified command.

Below is the syntax for some of the global commands

Global 'reboot'

Description

This command reboots all Security Group Members.

Syntax

# g_reboot [-a]

> reboot [-a]

Parameters

Parameter	Description
No Parameter	Reboots all Security Group Members that are in the UP state only.
`-a`	Reboots all Security Group Members in both the DOWN and UP states.

Global 'top'

Description

The global top command shows activity of Security Group Member processors in real time.

The default output also shows a list of the most processor-intensive processes.

The global top command relies on the user configuration for the local top utility.

The command uses the local Security Group Member configuration file for configuring the output on the remote Security Group Members.

With the standard functionality of the Linux top command, the global top command adds these features for the Security Group.

Syntax for Gaia gClish

> top -h

> top [local] [{-f [-o <filename>] [-n <iter>] | -s <filename>}] -b <SGM_IDs> [<top_params>]

Syntax for the Expert mode

# g_top -h

# g_top [local] [{-f [-o <filename>] [-n <iter>] | -s <filename>}] -b <SGM_IDs> [<top_params>]

Parameters

Parameter	Description
`-h`	Shows the built-in help.
`local`	Use the local configuration file.
`-f`	Export the output to a file.
`-o <filename>`	File and path of the output file. Default = `/vat/log/gtop.<time>` Use with `-f`
`-n <iter>`	Number of iterations. Default = 1 Use with `-f`
`-b <SGM_IDs>`	Applies to Security Group Members as specified by `<SGM_IDs>`. `<SGM_IDs>` can be: No `<SGM_IDs` > specified, or `all` - Applies to all Security Group Members and Sites One Security Group Member (for example, `1_1`) A comma-separated list of Security Group Members (for example, `1_1,1_4`) A range of Security Group Members (for example, `1_1-1_4`) In Dual Site, one Site (`chassis1`, or `chassis2`) In Dual Site, the Active Site (`chassis_active`)
`<top_params>`	Parameters of the standard `top` command. For more information, see the `top` command documentation.
-s <filename>	Shows the content of the output file <filename>.

The top command uses a configuration file to manage output display. By default, it copies and uses this configuration file from the local blade (usually located in the ~/.toprc). This file is copied to all Security Group Members and is used when the top command is run.

To manage the 'g_top' display:

Run:

# top

Set the desired display view (press h to see the built-in help).
Press Shift+W to save the configuration.

Run:

# g_top

To send output to a file

At times, it is more convenient to send the g_top output to a file. For example, when there are more Security Group Members than the screen can handle.

To enable the File Mode, run:

# g_top -f