topic R77.30 - Create IP objects and install policy on Cluster in API / CLI Discussion

R77.30 - Create IP objects and install policy on Cluster

H4MCO_N2RES — Tue, 31 May 2022 09:18:05 GMT

Hello,

I've a cluster of R77.30 and I'm working on a script to deploy multiple IP objects in CLI with an SSH connexion.

> add host name IP_test_111.111.111.111 ipv4-address 111.111.111.111 > add host name IP_test_222.222.222.222 ipv4-address 222.222.222.222

After that I want to push this new configuration on my cluster (1 cluster of 2 gateways named "ClusterGW") but I don't know the command that I should use to push as I do on Smart Console with the "Install Policy" button.

I've found this API Reference but the command "Install-policy" is not recognized. I've tried to go into expert mode, but same thing appends

https://sc1.checkpoint.com/documents/latest/APIs/index.html#gui-cli/install-policy~v1.2%20

I've found this other helping thread, but "mgmt_cli" is not recognized too.

https://community.checkpoint.com/t5/API-CLI-Discussion/How-can-we-install-on-multiple-firewalls-using-install-policy/td-p/54090

Can you help me on this please ?

Regards

Re: R77.30 - Create IP objects and install policy on Cluster

_Val_ — Tue, 31 May 2022 12:54:50 GMT

There is no APIs on R77, yuo need to go to R8x version, preferably the latest.

Re: R77.30 - Create IP objects and install policy on Cluster

H4MCO_N2RES — Wed, 01 Jun 2022 11:13:19 GMT

Hello,

Thank you for this information but I dont understand why we can add some objects and groups in CLI if we can not install them after ?

Is there something that I don't understand ?

Re: R77.30 - Create IP objects and install policy on Cluster

Bob_Zimmerman — Wed, 01 Jun 2022 16:25:56 GMT

Do you have a management server separate from the firewalls? If so, which part is R77.30 and what is the version of the other part?

Re: R77.30 - Create IP objects and install policy on Cluster

the_rock — Wed, 01 Jun 2022 16:31:59 GMT

I think there was another tool pre R80 to do this, just cant recall the name now.

Re: R77.30 - Create IP objects and install policy on Cluster

Bob_Zimmerman — Wed, 01 Jun 2022 17:47:51 GMT

dbedit and ofiller (which uses dbedit) are the two tools for rapidly making objects on pre-R80 managements, but they're not recommended for R80 and up (use the API instead).