> Source: [sk101690](https://support.checkpoint.com/results/sk/sk101690) # sk101690 - How to reset a Traditional VSX Gateway with the "reset_gw" command | Property | Value | |----------|-------| | Solution ID | sk101690 | | Date Created | 2014-07-22 | | Last Modified | 2025-05-27 | | Technical Level | General | | Products | Security Gateway | | Versions | R82, R81.20, R81.10 (EOS), R81 (EOS) | | OS | Gaia | ## Solution This article does not apply to the VSNext mode. **Table of Contents:** * Introduction * Limitations * Important Notes * Procedure * Related documentation * Related solutions Introduction {#Introduction} ---------------------------- Starting in **VSX R77** , you can reset a Traditional VSX Gateway / VSX Cluster Member using the '`reset_gw`' utility (this saves the time required to re-install the machine from scratch and time required to reconfigure Dynamic Routing). The '`reset_gw`' is a utility that wipes out all VSX configurations. However, it does not revert the VSX machine to its initial state (i.e., clean installation). When executed, the '`reset_gw`' script performs the following: 1. Resets SIC on the VSX Gateway / VSX Cluster Member. 2. Disables CoreXL on VSX machine. 3. Deletes all VSX-related information. Note: * Old `$FWDIR/state/local/VSX/local.vsall` file is stored as `$FWDIR/state/local/VSX/local.vsall.keep` * Old `$FWDIR/state/local/VSX/local.vskeep` file is stored as `$FWDIR/state/local/VSX/local.vskeep.keep` * Old `$FWDIR/state/local/VSX/local.vs` file is stored as `$FWDIR/state/local/VSX/local.vs.keep` 4. Saves Dynamic Routing and DHCP Relay settings that were configured in Gaia Clish (to allow these settings to be recovered later). **Note:** This step is not relevant for Crossbeam chassis that runs R77.30 and lower. The following settings are saved from all Virtual Systems (except VS0) to the special file '**`/var/tmp/restore_routed_bindings`**': * ospf * bgp * rip * pim * igmp * bootp/dhcp relay

5. Deletes the `$FWDIR/conf/masters` file. 6. Automatically reboots the VSX Gateway / VSX Cluster Member. 7. Creates a log file of all operations - **`$CPDIR/tmp/resetgw.log`** Make sure to save this log file. Note: Bond configuration will *not* be removed and there is no need to restore it at a later time. Limitations {#Limitations} -------------------------- * VSX reset procedure supports only these Traditional VSX versions - R77, R77.10, R77.20 and higher, running on Gaia OS or Crossbeam XOS. * Check Point services must be started ('`cpstart`') before starting the VSX reset procedure. * On a VSX Cluster Member, the state must be '`Down`' or '`Standby`' before starting the VSX reset procedure. * VSX reset procedure can be invoked only from the context of VSX itself (VS0). * VSX reset procedure supports only the DMI configuration. * VSX reset procedure automatically disconnects all SSH connections. Therefore, it is strongly recommended to perform this procedure over serial console. Important Notes {#Important Notes} ---------------------------------- * VSX reset procedure is irreversible. * VSX reset procedure re-initializes SIC on the VSX Gateway / VSX Cluster Member. * VSX reset procedure automatically reboots the VSX Gateway / VSX Cluster Member. * VSX reset procedure on Scalable Platforms - in cases where a complete recover is required, this operation should only be valid for a Security Group that contains only **one** Security Group Member (SMO only), because only the SMO member will later undergo '`vsx_util reconfigure`'. The rest of the Security Group Members will sync with SMP as they are being added to the Security Group. Any deviation from these instructions is not valid and may result in unexpected behavior. Procedure {#Procedure} ---------------------- 1. Connect to command line on the VSX Gateway / VSX Cluster Member (recommended - over serial console). 2. Log in to Expert mode. 3. Switch to context of VS0: `[Expert@HostName:0]# vsenv 0` 4. Execute the '`reset_gw`' script and follow the on-screen instructions: `[Expert@HostName:0]# reset_gw` 5. When the reset process is complete, the VSX machine will be automatically rebooted. Notes: * After reboot, make sure to save the log file - `$CPDIR/tmp/resetgw.log` * After reboot, the VSX machine will not retain residues of any VSX-related information and will be un-initialized. You can either configure the VSX Gateway / VSX cluster member from the scratch, or re-create the previous VSX configuration by running '`vsx_util reconfigure`' command on Security Management Server / Domain Management Server that manages this VSX Gateway / VSX Cluster (you have to use the SIC password you created during the VSX reset). * If you re-created the previous VSX configuration by running '`vsx_util reconfigure`' command and rebooted the VSX machine, then you can restore the saved Dynamic Routing and DHCP Relay settings in the following way: **Note:** This step is not relevant for Crossbeam. ``` [Expert@HostName:0]# vsenv 0 [Expert@HostName:0]# dbset -f /var/tmp/restore_routed_bindings [Expert@HostName:0]# dbset :save ``` (5) Related documentation {#Related documentation} -------------------------------------------------- * VSX Administration Guide ([R77.X](http://supportcontent.checkpoint.com/documentation_download?id=24802), [R80](http://downloads.checkpoint.com/dc/download.htm?ID=46537), [R80.10](http://downloads.checkpoint.com/dc/download.htm?ID=54764)) * Release Notes ([R77](http://supportcontent.checkpoint.com/documentation_download?id=24827), [R77.10](http://supportcontent.checkpoint.com/documentation_download?id=30257), [R77.20](http://supportcontent.checkpoint.com/documentation_download?id=31853) , [R77.20 Appendix](http://downloads.checkpoint.com/dc/download.htm?ID=31854), [R77.30](http://downloads.checkpoint.com/dc/download.htm?ID=40107), [R77.30 Appendix](http://downloads.checkpoint.com/dc/download.htm?ID=40108), [R80](http://downloads.checkpoint.com/dc/download.htm?ID=46538), [R80.10](http://downloads.checkpoint.com/dc/download.htm?ID=54802)) * Gaia Administration Guide ([R77.X](http://supportcontent.checkpoint.com/documentation_download?id=24828), [R80.10](http://downloads.checkpoint.com/dc/download.htm?ID=54824)) * Command Line Interface Reference Guide ([R77.X](http://supportcontent.checkpoint.com/documentation_download?id=24833)) * Security Management Server Administration Guide ([R77.X](http://supportcontent.checkpoint.com/documentation_download?id=24830), [R80](http://downloads.checkpoint.com/dc/download.htm?ID=46534) / [R80](http://downloads.checkpoint.com/dc/download.htm?ID=46535), [R80.10](http://downloads.checkpoint.com/dc/download.htm?ID=54842)) * Multi-Domain Security Management Administration Guide ([R77.X](http://supportcontent.checkpoint.com/documentation_download?id=24807), [R80](http://downloads.checkpoint.com/dc/download.htm?ID=46532) / [R80](http://downloads.checkpoint.com/dc/download.htm?ID=46535), [R80.10](http://downloads.checkpoint.com/dc/download.htm?ID=54841)) Related solutions {#Related solutions} -------------------------------------- * [sk100395 - How to backup and restore VSX gateway](http://supportcontent.checkpoint.com/solutions?id=sk100395) * [sk97552 - VSX Reconfigure and Upgrade Matrix to R77.10 / R77.20 / R77.30](http://supportcontent.checkpoint.com/solutions?id=sk97552) * [sk34098 - How to reset SIC on a VSX Gateway for a specific Virtual System](http://supportcontent.checkpoint.com/solutions?id=sk34098) * [sk65764 - How to reset SIC](http://supportcontent.checkpoint.com/solutions?id=sk65764) --- # Agent Instructions This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products. ## Navigating This Knowledge Base - **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt) - **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml) - **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}` - **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content