| admin@PA> show system info | match vsys
multi-vsys: on |
After adding a new virtual system
from the CLI, you must log out and log back in to see the new virtual
system within the CLI.
| admin@PA> set system setting target-vsys ?
none none
vsys1 vsys1
vsys2 vsys2
<value> <value> |
| admin@PA> set system setting target-vsys <vsys-name> For
example, use the following command to switch to vsys2; note that
the vsys name is case sensitive: > set system setting target-vsys vsys2
Session target vsys changed to vsys2
admin@PA-vsys2> Notice that the command prompt now shows
the name of the vsys you are now administering. |
| admin@PA> show session meter Example
output: VSYS Maximum Current Throttled 1 10 30 1587 Maximum
indicates the maximum number of sessions allowed per dataplane,
Current indicates the number of sessions being used by the virtual
system, and Throttled indicates the number of sessions denied for
the virtual system because the sessions exceeded the Maximum number
multiplied by the number of dataplanes in the system.
As
shown in this example, on a PA-5200 Series or PA-7000 Series firewall,
the Current number of sessions being used can be greater than the Maximum
configured for Sessions Limit (Device > Virtual Systems > Resource)
because there are multiple dataplanes per virtual system. The Sessions Limit
you configure on a PA-5200 or PA-7000 Series firewall is per dataplane,
and will result in a higher maximum per virtual system.
|
| admin@PA-vsys2> show user ip-user-mapping all |
| admin@PA-vsys2> set system setting target-vsys none
admin@PA> |