Showing Hardware State (asg stat)

Description

Use the asg stat command in Gaia gClish The name of the global command line shell in Check Point Gaia operating system for Security Appliances connected to Check Point Quantum Maestro Orchestrators. Commands you run in this shell apply to all Security Appliances in the Security Group. or the Expert mode to show the state of the system and hardware components.

The command output shows:

Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources.Mode (Gateway or VSX Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Security Gateways and other network devices. These Virtual Devices provide the same functionality as their physical counterparts.)
Uptime
Number of members in the Security Group A logical group of Security Appliances that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. Every Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected.
Number of Virtual Systems
Software Version
Information related to VSX configuration

Syntax

asg stat

-h

      -i list_all

      -i sgm_info

      -i tasks

      -v [-amw]

      vs [all [-p]]

Note - If you run this command in the context of a Virtual System, the output is for the applicable Virtual System.

Parameters

Parameter	Description
No Parameter	Shows the Security Group status (short output).
`-h`	Shows the built-in help.
`-i list_all`	Shows: The IDs of the Security Group members, their state and IP addresses Tasks and on which Security Group member they run
`-i sgm_info`	Shows the IDs of the Security Group members, their state and IP addresses
`-i tasks`	Shows the list of Tasks and on which Security Group member they run: SMO - Single Management Object Single Security Gateway object in SmartConsole that represents a Security Group configured on Quantum Maestro Orchestrator. Acronym: SMO. General - General LACP - Interface Bonding CH Monitor - Site state monitor DR Manager - Dynamic Routing manager UIPC - Unique IP Address for each Site Alert - Alerts
`-v [-amw]`	Shows the detailed Security Group status (verbose output).
`vs [all [-p]]`	Shows the VSX information: `vs` Shows general output for a Virtual System. Run this command in the context of the Virtual System. `vs all` Output also shows all Virtual Systems. `vs all -p` Output shows a summary health status for all Virtual Systems. For more information on a specific Virtual System, run the "`asg stat vs`" command from the context of the Virtual System.

Below are some example

Example 2 - Detailed Output (asg stat -v)

Syntax

asg stat -v

Example output (top section)

[Expert@MyChassis-ch01-01:0]# asg stat -v

--------------------------------------------------------------------------------

| System Status - Maestro                                                      |

--------------------------------------------------------------------------------

| Up time                     | 02:10:39 hours                                 |

| SGMs                        | 30/30                                          |

| Version                     | R80.30SP (Build Number XXX)                    |

--------------------------------------------------------------------------------

| SGM ID                              Chassis 1                                |

|                                     ACTIVE                                   |

--------------------------------------------------------------------------------

|  1                                    ACTIVE                                 |

|  2                                    ACTIVE                                 |

|  3                                    ACTIVE                                 |

... ... ... ...

|  30                                   ACTIVE                                 |

--------------------------------------------------------------------------------

... ... ...

This output shows that Chassis1 is Active with 30 Security Group Members in the Active (UP) state.

Explanation about the output:

Field	Description
SGM ID	Identifier of the Security Group Member. The `(local)` is the Security Group Member, on which you ran the command.
State	State of the Security Group Member: `ACTIVE` - The Security Group Member is processing traffic `DOWN` - The Security Group Member is not processing traffic `Detached` - No Security Group Member is detected in a slot To change manually the state of the Security Group Member, use the `g_clusterXL_admin` command. This command administratively changes the state to ACTIVE or DOWN. The Security Group Member that is DOWN because of a software or hardware problem cannot be changed to ACTIVE with this command.

Field

Description

SGM ID

Identifier of the Security Group Member.

The (local) is the Security Group Member, on which you ran the command.

State

State of the Security Group Member:

ACTIVE - The Security Group Member is processing traffic
DOWN - The Security Group Member is not processing traffic
Detached - No Security Group Member is detected in a slot

To change manually the state of the Security Group Member, use the g_clusterXL_admin command. This command administratively changes the state to ACTIVE or DOWN. The Security Group Member that is DOWN because of a software or hardware problem cannot be changed to ACTIVE with this command.

Example output (bottom section)

... ... ...

--------------------------------------------------------------------------------

| Chassis Parameters                                                           |

--------------------------------------------------------------------------------

| Unit        |                      Chassis 1                        | Weight |

--------------------------------------------------------------------------------

| SGMs        |                       30 / 30                         |   6    |

| Ports       |                                                       |        |

|   Standard  |                        4 / 4                          |  11    |

|   Bond      |                        0 / 0                          |  11    |

|   Other     |                        0 / 0                          |   6    |

| Sensors     |                                                       |        |

|   SSMs      |                        2 / 2                          |  11    |

|             |                                                       |        |

| Grade       |                      246 / 246                        |   -    |

--------------------------------------------------------------------------------

| Synchronization                                                              |

|     Sync to Active chassis:    Enabled                                       |

--------------------------------------------------------------------------------

Note - The X/X notation shows the number of components that are UP and the components must be UP. For example, on the SGMs line, 30/30 means that 30 Security Group Members are currently UP and 30 must be UP.

Field

Description

Grade

The sum of the grades of all components. The grade of each component is the unit weight multiplied by the number of components that are UP.

You can configure the unit weight of each component to show the importance of the component in the system.

To configure the unit weight run:

> set chassis high-availability factors <sensor_name>

For example, to change the weight of the Security Group Member to 12, run:

> set chassis high-availability factors sgm 12

If you run the asg stat -v command, the output shows a higher unit weight and system grade.

Synchronization

Status of synchronization between Security Group Members located in the same Security Group.