Skip to main content
kallbrandt
New Member
August 1, 2016
Solved

Reference check in cli - Is it possible?

  • August 1, 2016
  • 1 reply
  • 12992 views

Is there an easy (preferrably, but anything goes..) way to cross-check any references to other items in the cli?

I just realised I don't know any way to do this...

Is it even possible?

Grep doesn' count...

:)

    Best answer by emnoc

    yes

     

    diag system checkused is a good thing to know.

     

    http://socpuppet.blogspot.com/2014/10/a-few-examples-of-how-to-do-dependency.html

     

    This is basically what the webGUI does. You ca check most object via he cli 

     

    examples

     

    diag sys checkused firewall.adress.name <the exact name >

    diag sys checkused firewall.addrgrp.name <the exact name>

    diag sys checkused firewall.service.group.name  msql

    diag sys checkused firewall.vip.name < the exactname>

    diag sys checkused firewall.service.custom.name < theexact name>

    diag sys  checkused firewall.policy.id 

    diag sys checkusd system.interface.name <interface exact name >

     

     

     

    1 reply

    emnoc
    emnocAnswer
    New Member
    August 1, 2016

    yes

     

    diag system checkused is a good thing to know.

     

    http://socpuppet.blogspot.com/2014/10/a-few-examples-of-how-to-do-dependency.html

     

    This is basically what the webGUI does. You ca check most object via he cli 

     

    examples

     

    diag sys checkused firewall.adress.name <the exact name >

    diag sys checkused firewall.addrgrp.name <the exact name>

    diag sys checkused firewall.service.group.name  msql

    diag sys checkused firewall.vip.name < the exactname>

    diag sys checkused firewall.service.custom.name < theexact name>

    diag sys  checkused firewall.policy.id 

    diag sys checkusd system.interface.name <interface exact name >

     

     

     

    kallbrandt
    New Member
    August 1, 2016

    Cool, thanks!

    emnoc
    New Member
    August 1, 2016

     

    A few more cool ones;

     

     

    ( vpn users and ldap )

     

     

    diag sys checkused  user.local.name theusernamehere

    diag sys checkused user.ldap.name usernamehere

     

    ( interface in a vdom )

     

    diag sys checkused  system.vdom.name  <vdomname>

     

    ( vpn interface )

     

    dia sys checkused  vpn.ipsec.phase1-interface.name interfacename