topic Re: Changing PBR rules using expert user in Firewall and Security Management

Changing PBR rules using expert user

Jones_Jardel_Po — Tue, 24 Jul 2018 20:49:48 GMT

Hello guys!

There is a way to change PBR rules using the expert mode?

Re: Changing PBR rules using expert user

PhoneBoy — Wed, 25 Jul 2018 03:43:32 GMT

While it may be possible to change PBR outside of clish, it is not supported.

You can call clish commands from expert mode.

But the question is: why do you want to do this?

Re: Changing PBR rules using expert user

Jones_Jardel_Po — Wed, 25 Jul 2018 12:52:07 GMT

Hi Dameon,

Thank you for your reply.

I'm looking for it because I'm working with GRE tunnels on security gateways, monitoring the tunnels and performing traffic decisions based on the monitoring, so, using the PBR or interface up/down...

Re: Changing PBR rules using expert user

PhoneBoy — Wed, 25 Jul 2018 16:36:30 GMT

As you're probably aware, GRE Tunnels aren't actually supported on Gaia currently.

See: Can users create a GRE tunnel on Gaia OS?

It may be possible to use standard Linux commands to configure policy routing.

However, routing on Gaia is controlled by routed and any changes made outside of clish/WebUI are not guaranteed to work or remain in effect for any period of time.

Re: Changing PBR rules using expert user

Jones_Jardel_Po — Wed, 25 Jul 2018 16:39:03 GMT

It may be possible to use standard Linux commands to configure policy routing.

However, routing on Gaia is controlled by routed and any changes made outside of clish/WebUI are not guaranteed to work or remain in effect for any period of time.

It's exactly what I saw. Because of that I'm asking more details about.

Thank you Dameon.

Re: Changing PBR rules using expert user

PhoneBoy — Wed, 25 Jul 2018 16:49:14 GMT

http://linux-ip.net/gl/ip-cref/

I would refer you to generic Linux documentation in this case, perhaps: ip-cref

But like I said, no guarantees it will work since this configuration is actually controlled through routed.

Re: Changing PBR rules using expert user

Jones_Jardel_Po — Wed, 01 Aug 2018 16:41:49 GMT

I found the sk106938 - How to run Clish commands from Expert mode and it is was I was looking for.

Using the clish I can run clish shell commands under expert mode and then get or change PBR table actions or rules.

Thanks.

Re: Changing PBR rules using expert user

PhoneBoy — Wed, 01 Aug 2018 17:00:52 GMT

Or you could do that

I thought the issue had more to do with the use of unsupported interface types (e.g. the GRE ones) thus you couldn't use the clish commands.