SIC issue while communicating a gateway via ansible

Aathi — Tue, 02 Jul 2019 04:46:12 GMT

Hi Team,

I am trying to create a gateway and establish SIC communication between gateway to management server using ansible.i am able to create a gateway but SIC is not commuincating

Error:

Installation failed.Reason :No SIC name found in the peer object definition,Please test its SIC status.

But while adding manually i am able to add the gateway in MGMT.

Playbook:

- name: "Create SimpleGateway {{hostname}} at {{eth0_ipv4}}"
check_point_mgmt:
command: add-simple-gateway
parameters:
name: "{{hostname}}"
ipv4-address: "{{eth0_ipv4}}"
color: blue
firewall: "true"
version: "R80.10"
ips: "true"
one-time-password: "{{sickey}}"
interfaces:
- name: eth0
ipv4-address: "{{eth0_ipv4}}"
ipv4-network-mask: 255.255.255.0
topology: External
anti-spoofing: "true"
- name: eth1
ipv4-address: "{{eth1_ipv4}}"
ipv4-network-mask: 255.255.255.0
topology: Internal
anti-spoofing: "true"
topology-settings:
ip-address-behind-this-interface: "network defined by the interface ip and net mask"
session-data: "{{login_response}}"

Kindly help me on this.

Re: SIC issue while communicating a gateway via ansible

PhoneBoy — Tue, 02 Jul 2019 17:26:15 GMT

I assume you're also publishing after you create the gateway object.
However, that does NOT generate the certificates necessary for SIC.
You need the command push_cert from the CLI.
See: https://community.checkpoint.com/t5/API-CLI-Discussion-and-Samples/Question-quot-Ansible-Module-quot-for-Checkpoint-Managment/m-p/27246

topic SIC issue while communicating a gateway via ansible in Ansible

SIC issue while communicating a gateway via ansible

Re: SIC issue while communicating a gateway via ansible