I definitely love clish for adding huge lists of static routes. If you are up to it, you do everything via clish, while logging all your commands. You will save huge amounts of time especially when setting up vrrp clusters where you have to do most of the configuration twice.
Regards, Werner -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Robert Geller Sent: Saturday, January 29, 2005 05:46 To: [email protected] Subject: Re: [FW-1] Static Route The initial file contains all the system settings that are created by voyager. You can attempt to add the static entries, however I would definitely make a backup of the original initial file. I believe the file is in the /config/db directory. Im sure that checkpoint and nokia would not recommend / support doing this, however I can give you plenty of examples where I would not recommend doing what they document or instruct users to do. If you have a lab box, spare or non-production nokia, you can make the changes to the file and boot that unit with the intial file. I have configured nokia boxes this way, taking initial files and changing just the IPs for cluster members. There are always gotchas when doing these types of maneuvers, so double-check your work. -Rob Mears, Shane wrote: > I also have the nokia ip 530. What I ended up doing is seting it up to > receive. Ospf updates instead of creating static routes for about 120 > routes. You may want to consider that. Although it's less of a > security risk to me since its an internal firewall not exposed to the > internet. I would suppose that if you can find the file that the > static routes get put into from the voyager interface you may be able > to vi the files and paste the routes into it. Hope this helps. > > --shane > > -------------------------- > Sent from my BlackBerry Wireless Handheld > > SFWMD Wireless Email Solutions > > -----Original Message----- > From: Mailing list for discussion of Firewall-1 > <[email protected]> > To: [email protected] <[email protected]> > Sent: Fri Jan 28 19:57:35 2005 > Subject: Re: [FW-1] Static Route > > >>Hi CP Gurus, >> >>I had a checkpoint nokia 530 box and having some problem to configure >>the static route. I had more than 80 route to add. do u guys know any >>shortcut to add the route instead adding line by line on the voyager. >>I mean something like cisco pix firewall where u can copy and paste on >>the notepad and then copy to the cisco pix command line >>Any idea? >>Thanks >>help really appreciated >> >>-- >>Regards >> >>Brandon >> >>CONFIDENTIAL POLICY: >> >>"THIS E-MAIL AND ANY FILES TRANSMITTED WITH IT CONTAINS INFORMATION >>WHICH MAY BE CONFIDENTIAL IT IS INTENDED SOLELY FOR THE USE OF THE >>INDIVIDUAL OR THE ENTITY TO WHOM THEY ARE ADDRESSED. IF YOU ARE NOT >>THE INTENDED RECIPIENT, PLEASE BE ADVISED THAT YOU HAVE RECEIVED THIS >>E-MAIL IN ERROR AND THAT ANY USE, DISSEMINATION, FORWARDING OR >>PRINTING OF THIS E-MAIL IS STRICTLY PROHIBITED. IF YOU HAVE RECEIVED >>THIS E-MAIL IN ERROR, PLEASE NOTIFY US BY RETURN E-MAIL AT THE ADDRESS >>ABOVE AND DELETE THE E-MAIL FROM YOUR FILES. THANK YOU FOR YOUR >>CO-OPERATION." >> > > > > -- > Regards > > Brandon Liew > > > > CONFIDENTIAL POLICY: > > "THIS E-MAIL AND ANY FILES TRANSMITTED WITH IT CONTAINS INFORMATION > WHICH MAY BE CONFIDENTIAL IT IS INTENDED SOLELY FOR THE USE OF THE > INDIVIDUAL OR THE ENTITY TO WHOM THEY ARE ADDRESSED. IF YOU ARE NOT > THE INTENDED RECIPIENT, PLEASE BE ADVISED THAT YOU HAVE RECEIVED THIS > E-MAIL IN ERROR AND THAT ANY USE, DISSEMINATION, FORWARDING OR > PRINTING OF THIS E-MAIL IS STRICTLY PROHIBITED. IF YOU HAVE RECEIVED > THIS E-MAIL IN ERROR, PLEASE NOTIFY US BY RETURN E-MAIL AT THE ADDRESS > ABOVE AND DELETE THE E-MAIL FROM YOUR FILES. THANK YOU FOR YOUR > CO-OPERATION." > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > -- This message has been scanned for viruses and dangerous content, and is believed to be clean. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
