Skip to main content
kallbrandt
New Member
August 1, 2016
Solved

Reference check in cli - Is it possible?

  • August 1, 2016
  • 5 replies
  • 12993 views

Is there an easy (preferrably, but anything goes..) way to cross-check any references to other items in the cli?

I just realised I don't know any way to do this...

Is it even possible?

Grep doesn' count...

:)

    Best answer by emnoc

    yes

     

    diag system checkused is a good thing to know.

     

    http://socpuppet.blogspot.com/2014/10/a-few-examples-of-how-to-do-dependency.html

     

    This is basically what the webGUI does. You ca check most object via he cli 

     

    examples

     

    diag sys checkused firewall.adress.name <the exact name >

    diag sys checkused firewall.addrgrp.name <the exact name>

    diag sys checkused firewall.service.group.name  msql

    diag sys checkused firewall.vip.name < the exactname>

    diag sys checkused firewall.service.custom.name < theexact name>

    diag sys  checkused firewall.policy.id 

    diag sys checkusd system.interface.name <interface exact name >

     

     

     

    5 replies

    emnoc
    emnocAnswer
    New Member
    August 1, 2016

    yes

     

    diag system checkused is a good thing to know.

     

    http://socpuppet.blogspot.com/2014/10/a-few-examples-of-how-to-do-dependency.html

     

    This is basically what the webGUI does. You ca check most object via he cli 

     

    examples

     

    diag sys checkused firewall.adress.name <the exact name >

    diag sys checkused firewall.addrgrp.name <the exact name>

    diag sys checkused firewall.service.group.name  msql

    diag sys checkused firewall.vip.name < the exactname>

    diag sys checkused firewall.service.custom.name < theexact name>

    diag sys  checkused firewall.policy.id 

    diag sys checkusd system.interface.name <interface exact name >

     

     

     

    kallbrandt
    New Member
    August 1, 2016

    Cool, thanks!

    emnoc
    New Member
    August 1, 2016

     

    A few more cool ones;

     

     

    ( vpn users and ldap )

     

     

    diag sys checkused  user.local.name theusernamehere

    diag sys checkused user.ldap.name usernamehere

     

    ( interface in a vdom )

     

    diag sys checkused  system.vdom.name  <vdomname>

     

    ( vpn interface )

     

    dia sys checkused  vpn.ipsec.phase1-interface.name interfacename

     

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!