topic API - Adding network objects with the same IP than others already created in API / CLI Discussion

API - Adding network objects with the same IP than others already created

DPB_Point — Fri, 29 Mar 2019 11:54:58 GMT

HI!

I am trying to create network objects in a checkpoint due to a migration. As in ASA we could have created objects with the same network range(duplicated objects), I am having several problems to migrate it succesfully.

I am using a csv file in which I have included the objects with the syntax that Checkpoint allows. I use the following command:

mgmt_cli add network -r true --batch prueba.csv -d IBDL_CALES

I have also added the ignore-warnings field, ignore-errors and set-if-exists fields but none of them let me create the object that has the same IP or IP range than the ones that are created in the Checkpoint. The output I get is the following:

Line 2: code: "err_validation_failed"
message: "Validation failed with 1 warning"
warnings:
- message: "More than one network have the same IP x.x.x.x/y.y.y.y"

Does Any of you know how to supress that warnings and create that duplicated objects?

It's important to me creating them because they are a lot of objects(I have the same problem ith the hosts) and then We want to migrate the policies too and we must have the same objects than in the ASA.

Re: API - Adding network objects with the same IP than others already created

PhoneBoy — Fri, 29 Mar 2019 13:55:10 GMT

Just to clarify, you have an object that covers x.y.z.w/a.b.c.d and want to create another with a different name?
Are you adding set-of-exists true to your CLI command or the CSV?

Re: API - Adding network objects with the same IP than others already created

Adam_Forester — Fri, 29 Mar 2019 14:03:04 GMT

add this to your command 'ignore-warnings true ignore-errors true'

That will ignore the errors...

Re: API - Adding network objects with the same IP than others already created

Adam_Forester — Fri, 29 Mar 2019 14:14:48 GMT

set-if-exists will update the object not create a second one. If he is trying to create different named objects but same subnet it would just update the name.

Re: API - Adding network objects with the same IP than others already created

DPB_Point — Mon, 01 Apr 2019 06:59:26 GMT

As I have mentioned before, I have already tried to put that ignore errors field and the warnings field and I continue receiving the following error:

Line 2: code: "err_validation_failed"
message: "Validation failed with 1 warning"
warnings:
- message: "More than one network have the same IP x.x.x.x/y.y.y.y"

Executed command failed. Changes are discarded.

Re: API - Adding network objects with the same IP than others already created

DPB_Point — Mon, 01 Apr 2019 07:10:48 GMT

I have just found out how to solve it. The problem was that it's compulsory to include it in the csv file as a field and you can't type it as a field in the mgmt_cli command.

Thanks for the support!!!

Re: API - Adding network objects with the same IP than others already created

Marko_Grmek — Mon, 29 Apr 2019 06:24:34 GMT

Hello DPB_Point ,

what is the exact syntax in csv file?

I tried to put ignore_warnings ignore_errors, ignore-warnings, ignore-errors in the first line, but still giving an error:

error message:

Line 4: code: "err_validation_failed"
message: "Validation failed with 1 warning"
warnings:
- message: "Multiple objects have the same IP address 1.1.1.3"

Executed command failed. Changes are discarded.

Thank you,

Marko

Re: API - Adding network objects with the same IP than others already created

venkata_marutur — Tue, 23 Jul 2019 18:29:41 GMT

This is not what I am noticing. This is what I am seeing:
Created Test-1( 1.1.1.0 /24) using Smartconsole CLI like this :
> add network name Test-1 subnet 1.1.1.0 subnet-mask 255.255.255.0 color blue
Published the change.
Then did this, expecting the name will change:
> add network name Test-2 subnet 1.1.1.0 subnet-mask 255.255.255.0 color blue set-if-exits true ignore-warnings true ignore-errors true
But it did create two objects "Test-1" and "Test-2" with same network 1.1.1.0/24

Can you please guide me? My API version is 1.1

Thanks.

Re: API - Adding network objects with the same IP than others already created

PhoneBoy — Tue, 23 Jul 2019 19:35:09 GMT

set-if-exists true will only work if you create an object with the same name, not if you create an object with a different name for the same IP.
Further, you suppressed knowledge of this with ignore-warnings true, which should have prevented you from doing that.

This is expected behavior.

Re: API - Adding network objects with the same IP than others already created

venkata_marutur — Tue, 23 Jul 2019 19:58:01 GMT

So, what should I do if I want to "Create a new object with an IP but just edit the name and parameters like comments and color if another object with that IP does exist"? Or in other words how do I make "set-if-exists" to look for IP address instead of name?
Thanks in advance!

Re: API - Adding network objects with the same IP than others already created

Adam_Forester — Tue, 23 Jul 2019 20:02:00 GMT

I’m going to send you a direct message and we can work through this.

Re: API - Adding network objects with the same IP than others already created

DZ_KB — Tue, 02 Dec 2025 15:27:08 GMT

Hi,

I'm not sure to understand. Can you please share the csv file and the command that you have passed ?

thx a lot.