> Source: [sk100645](https://support.checkpoint.com/results/sk/sk100645) # sk100645 - VSX Provisioning Tool | Property | Value | |----------|-------| | Solution ID | sk100645 | | Date Created | 2014-05-14 | | Last Modified | 2026-03-31 | | Technical Level | General | | Products | Security Gateway | | Versions | R81 (EOS) | | OS | Windows, Linux, Gaia | ## Solution **Table of Contents:** * Introduction * Availability * Limitations * Documentation * Related solutions **Important:** For Check Point versions R81.10 and higher, refer to the VSX Administration Guide for you version ([R81.10](https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_VSX_AdminGuide/Default.htm), [R81.20](https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_VSX_AdminGuide/Default.htm), [R82](https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_VSX_AdminGuide/Default.htm), [R82.10](https://sc1.checkpoint.com/documents/R82.10/WebAdminGuides/EN/CP_R82.10_VSX_AdminGuide/Default.htm)) \> Command Line Reference \> vsx_provisioning_tool. ### Introduction {#Introduction} The VSX Provisioning Tool allows the VSX administrator to add and remove Virtual Devices (VS, VR, VSW), interfaces and routes from the **command line** of a Security Management Server / Multi-Domain Security Management Server. This allows the automation of the required VSX Provisioning operations in the environment. VSX Provisioning Tool supports: * Security Management Servers / Multi-Domain Security Management Servers - **R76, R77, and above**. * VSX Gateways / VSX Clusters - **R75.40VS, R76, R77, and above**. Note: For backward compatibility information, refer to [sk113113 - Security Management Servers and supported managed Security Gateways](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk113113). ### Availability {#Availability} The following table provides the VSX Provisioning Tool for Management Servers: |------------------------------|---------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | Version of Management Server | Operating System of Management Server | Tool | | **R80 and above ^(1)^** | **Gaia** | integrated | | **R76 - R77.30 ^(2)^** | **Gaia / SecurePlatform / Linux OS** | [![](https://sc1.checkpoint.com/sc/images/download-m.png "For Security Management Server / Multi-Domain Security Management Server R76, R77, R77.10, R77.20 and R77.30 running on Gaia / SecurePlatform / Linux OS")](http://supportcontent.checkpoint.com/file_download?id=33458) (BIN) | | **R76 - R77.30 ^(2)^** | **Windows OS ^(3)^** | [![](https://sc1.checkpoint.com/sc/images/download-m.png "For Security Management Server R76, R77, R77.10, R77.20 and R77.30 running on Windows OS")](http://supportcontent.checkpoint.com/file_download?id=33459) (EXE) | Notes: 1. Starting in Management Server R80, the VSX Provisioning Tool is integrated (`$FWDIR/bin/vsx_provisioning_tool`). 2. For Management Server versions R76 - R77.30, the VSX Provisioning Tool has to be installed on the Management Server running on Gaia / SecurePlatform / Linux / Windows OS. For installation instructions, refer to the VSX Provisioning Tool Reference Guide. 3. For Management Server versions R76 - R77.30, the VSX Provisioning Tool can be installed on SmartConsole computer running on Windows OS. For installation instructions, refer to the VSX Provisioning Tool Reference Guide. ### Limitations {#Limitations} |----|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | ID | Symptoms | | 01 | While adding new routes in a single transaction, routes are added incorrectly, either with a wrong type or with a wrong IP address. This applies to single transaction additions, either implicitly with the "`-o `" command, or explicitly with the "`-f `" command. **Root Cause:** * In a single transaction, routes must appear in a specific order: 1) routes with "`leads_to`", 2) routes with "`next_hop`", 3) routes with "`propagate true`". **Possible Workarounds:** * Rearrange the order of the "`add route ...`" commands in the transaction to the following: 1. Firstly, put all routes with type "`leads_to`" 2. Secondly, put all regular "`next_hop`" routes without propagation 3. Finally, put all other routes (such as those with "`propagate true`") * Separate each type of route (as described in the previous method) to its own transaction and run those transactions consecutively. * Run each of the "`add route ...`" command in its own transaction. For example, omit "`transaction begin/end`" tags in a file (Note: This is not recommended). * The following awk scriplet can be used to sort existing script files: * `awk '$2!="route"{print} $2=="route"&& $7=="leads_to"{r1=r1 "\n" $0;next} $2=="route"&& $7=="next_hop"&&NF==8{r2=r2 "\n"$0;next} $2=="route"{r3=r3 "\n" $0} /^transaction end/{$0=""} END {print r1;print r2;print r3}' script.txt` **Resolved: R81.20 and above** | | 02 | If IPv6 is not used then this parameter isn't required in Adding and Modifying Settings of Virtual Devices. Whenever this parameter is used, the process verifies that IPv6 is enabled on the Gateways. **Resolved: R81.20 and above** | ### Documentation {#Documentation} * R76, R77, R77.x: * [VSX Provisioning Tool Reference Guide](http://supportcontent.checkpoint.com/documentation_download?id=33209) * R80.x: Command Line Reference \> vsx_provisioning_tool * [Check Point VSX R80.10 Administration Guide](https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_VSX_AdminGuide/html_frameset.htm) [](https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_VSX_AdminGuide/html_frameset.htm?topic=documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_VSX_AdminGuide/203611) * [Check Point VSX R80.20 Administration Guide](https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_VSX_AdminGuide/html_frameset.htm?topic=documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_VSX_AdminGuide/203611) * [Check Point VSX R80.30 Administration Guide](https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_VSX_AdminGuide/html_frameset.htm) * [Check Point VSX R80.40 Administration Guide](https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_VSX_AdminGuide/Content/Topics-VSXG/CLI/vsx_provisioning_tool.htm) * R8x.x: VSX Administration Guide \> Command Line Reference \> vsx_provisioning_tool * [Check Point VSX R81.10 Administration Guide](https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_VSX_AdminGuide/Topics-VSXG/CLI/vsx_provisioning_tool.htm) * [Check Point VSX R81.20 Administration Guide](https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_VSX_AdminGuide/Content/Topics-VSXG/Introduction.htm) * [Check Point VSX R82 Administration Guide](https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_VSX_AdminGuide/Default.htm) **Related solutions:** * [sk111946 - "vsx_provisioning_tool: error while loading shared libraries" error when running VSX Provisioning Tool](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111946) * [sk113235 - Anti-Spoofing group is deleted when adding a new route with VSX Provisioning Tool](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk113235) --- # Agent Instructions This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products. ## Navigating This Knowledge Base - **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt) - **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml) - **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}` - **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content