topic Re: scp with cprid_util in API / CLI Discussion

scp with cprid_util

Steve_Vandegaer — Thu, 15 Oct 2020 13:16:57 GMT

Hi all,

I'm looking for an easy way to get the Gaia config from multiple gateways and store in one place. My ideas was to try this with cpdir_util. I tried:

`$CPDIR/bin/cprid_util -server $IP -timeout 5 -verbose rexec -rcmd /bin/clish -s -c 'save configuration $GW'`
Where GW is a variable, this just saved the config with the name $GW in /

Not getting this to work I just used a fixed name

`$CPDIR/bin/cprid_util -server $IP -timeout 5 -verbose rexec -rcmd /bin/clish -s -c 'save configuration test_steve'`
This saves the file in /

So next I wanted to copy it to the management server

`$CPDIR/bin/cprid_util -server $IP -timeout 5 -verbose rexec -rcmd bash -c "scp /test_steve adminNXO@MGMT_IP:/home/admin/CP_migration/@GW"`

Trying to rename it during the scp. This doesn't work and even when just trying a fixed name the copy isn't done.

Anyone has any way to do this?

Thanks

Re: scp with cprid_util

Maarten_Sjouw — Thu, 15 Oct 2020 13:45:34 GMT

The error you are making here is that the $GW variable is inside the brackets, that will just be moved over as text as within Clish you cannot use a normal variable this will not work at all.

The second time you will be able to use a variable but is that a variable available locally on the gateway or is it only on the management server that you are running cprid_util from? For the latter, you should try to move the variable outside the brackets so it will be converted first.

Hope it makes sense.

Re: scp with cprid_util

Steve_Vandegaer — Thu, 15 Oct 2020 13:51:38 GMT

Ok but even this command doesn't do the copy

`$CPDIR/bin/cprid_util -server $IP -timeout 5 -verbose rexec -rcmd bash -c "scp /test_steve adminNXO@MGMT_IP:/home/adminNXO/CP_migration/"`

Here I would expect to see the file test_steve in the folder on the mgmt

Re: scp with cprid_util

Danny — Thu, 15 Oct 2020 14:17:12 GMT

Try this:

for i in `grep 'sic_name\|ipaddr' $FWDIR/conf/objects.C|grep -A1 sic_name|grep 'ipaddr '|tr -d ':ipadr ()\t'`; do cprid_util -server $i -verbose rexec -rcmd /bin/clish -c "show configuration"; done > gaia_backup_all_$(date +%Y%m%d%H%M)

Re: scp with cprid_util

Steve_Vandegaer — Thu, 15 Oct 2020 14:18:51 GMT

Any way to replace gaia_backup_all with the hostname of the gw it takes a backup from?

Re: scp with cprid_util

Danny — Thu, 15 Oct 2020 15:26:18 GMT

Sure, just split gaia_backup_all into single confguration files like this:

csplit -z gaia_backup_all /\#\ Configuration/ '{*}'; for i in xx*; do mv $i $(head -1 $i|awk 'NF>1{print $NF}'); done

Re: scp with cprid_util

Steve_Vandegaer — Mon, 26 Oct 2020 15:17:37 GMT

Thanks a lot, this saves me a lot of work.

Re: scp with cprid_util

HeikoAnkenbrand — Mon, 26 Oct 2020 16:14:29 GMT

Hi @Steve_Vandegaer,

use this script:

Easy Backup Tool - (migrate export + all GAIA configs)

This tool creates a backup of all GAIA gateway configurations with one CLI command "ebackup" and more other functions!

Only one CLI command "ebackup"
- Backup of all Gaia gateway configurations (Check Point appliances, Open Server, SMB appliances 11xx, 14xx)
- Migrate export on SMS
- Migrate-server on MDS
- Backup all files to one TGZ file
- FTP upload support backup file
- CP upload support for backup file via cprid_util

Easy execute CLI commands on all gateways simultaneously

Re: scp with cprid_util

Simon_Macpherso — Mon, 24 May 2021 04:50:34 GMT

Does this script select all gateways, including those that are members of a cluster?

Re: scp with cprid_util

DTaylor — Fri, 13 Jan 2023 17:35:57 GMT

Does this only work for R80 versions? I tried it on R81.20 and I get an error [NULL BUF]

Re: scp with cprid_util

SCSupport — Fri, 24 Mar 2023 11:50:12 GMT

yes it seems R81.x will need some mods to the script

Re: scp with cprid_util

Bob_Zimmerman — Fri, 24 Mar 2023 13:49:02 GMT

"(NULL BUF)" means CPRID tried to do something which didn't work. Any number of things can cause this. Do you have any other firewall between the management server and the firewalls it manages?