topic Re: Creating cluster interface via ansible in Ansible

Creating cluster interface via ansible

SebastianB — Thu, 27 Oct 2022 08:16:30 GMT

Hello,

I am trying to create a cluster interface via ansible, i am currently using cp_mgmt_simple_cluster module. I am running following code for the cluster interface creation and member IP addresses.

check_point.mgmt.cp_mgmt_simple_cluster:

firewall: true

state: present

ip_address: cluster-IP

interfaces:

- name: "test"

anti_spoofing: true

comments: "this interface is for testing purposes"

interface_type: cluster

ipv4_address: IP-address

network_mask: net-mask

members:

- interfaces:

- ip_address: member1 ip address on new interface

network_mask: 255.255.255.255

ip_address: member1 IP address

- interfaces:

- ip_address: member2 ip address on new interface

network_mask: 255.255.255.255

ip_address: member2 IP address

This code checks out and i get an OK but no changes are made, problem is i get changed:false and no changes have been made.

I have tried creating the interface only but i get the same changed:false.

Am i using correct module? Or am i using it the wrong way? How should it be created?

Any information helps.

Re: Creating cluster interface via ansible

PhoneBoy — Thu, 27 Oct 2022 19:48:09 GMT

What version of Check Point management are you running?

Re: Creating cluster interface via ansible

SebastianB — Fri, 28 Oct 2022 06:27:38 GMT

R81.10 and latest version of the mgmt module 4.0.0

Re: Creating cluster interface via ansible

PhoneBoy — Fri, 28 Oct 2022 18:26:24 GMT

What JHF is installed?
Looks like JHF 79 and above may be required as that is where the necessary API support was added.
See: https://sc1.checkpoint.com/documents/latest/APIs/index.html#api_versions~v1.8.1%20

Re: Creating cluster interface via ansible

SebastianB — Tue, 01 Nov 2022 09:17:40 GMT

JHF 79 was released on 24 october when the 4.0.0 was released way earlier, and the module was released even before 4.0.0 right?

We have v1.8 right now, when i look in MGMT API it does not specify 1.8.1 as supported versions.

Re: Creating cluster interface via ansible

Omer_Kleinstern — Wed, 02 Nov 2022 07:28:43 GMT

Hi @SebastianB ,

Can you share the output of the following commands?

mgmt_cli -r true show-api-versions
cpinfo -y all

Thanks,

Omer

Re: Creating cluster interface via ansible

SebastianB — Wed, 02 Nov 2022 07:59:47 GMT

mgmt_cli -r true show-api-versions:

"current-version" : "1.8",
"supported-versions" : [ "1", "1.1", "1.2", "1.3", "1.4", "1.5", "1.6", "1.6.1", "1.7", "1.7.1", "1.8" ]

cpinfo -y all:

This is Check Point CPinfo Build 914000227 for GAIA
[MGMT]
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 66
[FW1]
HOTFIX_GOT_MGMT_AUTOUPDATE
HOTFIX_WEBCONSOLE_AUTOUPDATE
HOTFIX_GOT_TPCONF_MGMT_AUTOUPDATE
HOTFIX_PUBLIC_CLOUD_CA_BUNDLE_AUTOUPDATE
HOTFIX_NGM_DOCTOR_AUTOUPDATE
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 66

I removed some of the results in cpinfo, if i removed something you want let me know

Re: Creating cluster interface via ansible

Omer_Kleinstern — Thu, 03 Nov 2022 08:02:55 GMT

API version 1.8.1 was released in JHF take 79. Since you have JHF take 66 installed, the API version in that take is still 1.8.

Regarding the original problem, looks like there is an issue with updating the interfaces of a cluster via ansible.

To support it will require changes in the Management code (not in the ansible collection). I suggest to open a TAC case.