topic Tacacs_Enable with Python in API / CLI Discussion

Tacacs_Enable with Python

stevenhunt77 — Fri, 17 Sep 2021 10:20:45 GMT

Hey everyone, I am trying to work on a python script that logs onto a firewall, moves into TACP-15 and enters the relevant password. After which it runs a command.

Problem is the script is getting stuck at the password prompt after running: tacacs_enable TACP-15.

I've tried adding \r to no avail. Has anyone managed this?

Relevant part of the script below:

# Then send the command and print the output

output = net_connect.send_command('lock database override')
print(output)

output = net_connect.send_command('tacacs_enable TACP-15')
print(output)

output = net_connect.send_command(expert_password)
print(output)

output = net_connect.send_command('show route')
print(output)

Re: Tacacs_Enable with Python

Andre_K — Fri, 17 Sep 2021 17:18:52 GMT

Why don't you use the GAIA API instead in combination with Python (requests module)?

For example:

POST https://<server-ip>:<port>/gaia_api/v1.6/show-routes

Documentation:

https://sc1.checkpoint.com/documents/latest/GaiaAPIs/#web/show-routes~v1.6%20

Re: Tacacs_Enable with Python

stevenhunt77 — Fri, 17 Sep 2021 11:23:34 GMT

Hey, the show route command is just an example. Really we would want to be doing various configuration commands such as configuring SNMP or tweaking RBA roles etc.

Re: Tacacs_Enable with Python

Art_Zalenekas — Fri, 17 Sep 2021 14:39:06 GMT

You can also use run-script for running commands either through the Gaia API or the Management API.

https://sc1.checkpoint.com/documents/latest/GaiaAPIs/#web/run-script~v1.6%20
https://sc1.checkpoint.com/documents/latest/APIs/#cli/run-script~v1.6%20