Replacing FW object in policy with API

Oded_Ratzon — Tue, 21 Jul 2020 11:24:59 GMT

Hi,

I new to all this API stuff and be glad for help and directions.

I have R80.30 and the SMS is managing 2 sepereted Gateways (FW-1 & FW-2) on the same package.

Each line on policy have diffrent gateway at the "Installed on" colum.

I want to create (manually) a cluster object (Cluster-1), and put this object instead of FW-1 at rule base.

I want to do it with mgmt_cli (is it even possible?)

I thought to filter the rule number from the "mgmt_cli show access-rulebase name Rulebase" command, where the FW-1 appering.

I didnt success. it look like I dont have all the rules & I couldn't get the rule number 😞

How can I do it ?

Oded.

Re: Replacing FW object in policy with API

PhoneBoy — Thu, 23 Jul 2020 14:55:58 GMT

When working with the rulebase in the API, the actual rule number isn't very relevant, the rule UID is, which is unique to the rule itself.
You should be able to do something like mgmt_cli show access-rulebase name Rulebase filter "FW-1 AND FW-2" to get all the rules that mention both.
From there, you iterate over each rule uid and set the install-on target to the new cluster object.
If this doesn't work, please show precisely what you tried with the exact results.

topic Re: Replacing FW object in policy with API in API / CLI Discussion

Replacing FW object in policy with API

Re: Replacing FW object in policy with API