topic Re: IP Tables in API / CLI Discussion

IP Tables

Avigdor_Sharon — Fri, 04 Dec 2015 06:51:05 GMT

Overview

A python scripts that takes the output of ip-tables and produces a script with a similar Check Point policy

Instructions

See power point slides in the attached zip.

Code Version

Code version 0.0.0

Tested on version

R80, API version 1.0

NOTICE: By using this sample code you agree to terms and conditions in this Terms and Conditions

...

Re: IP Tables

VN_Payers — Wed, 13 May 2020 06:57:10 GMT

Good morning, I have tested the script and it works very well for the most part, it only gives me problems in one command.

#create in-line layers - one for every chain:
mgmt_cli add layer name sub_policy_INPUT -s id.txt

#create top layer
mgmt_cli add layer name iptables_policy -s id.txt

The add layer command does not exist, but the add access-layer command does exist. I have changed it for the latter.

my iptable version is iptables v1.3.5

my CP version is product-version: "Check Point Gaia R80.30 "
os-build: "200"
os-kernel-version: "3.10.0-693cpx86_64"
os-edition: "64-bit"

do you think it will work properly?

regards

Re: IP Tables

Maik — Wed, 13 May 2020 08:34:23 GMT

Without verifying the actual script... if you should run into issues try to modify the login call to specify the api version which should be used ("--version 1"). In this case it would be version 1.0 - if you do not specify this your management server will automatically try to use the latest version (which is 1.5 for R80.30).

Re: IP Tables

PhoneBoy — Wed, 13 May 2020 16:12:11 GMT

This is a script that was developed for R80 (specifically, the first version).
It might need modification for later versions.