topic Re: API syntax fore creating inline-layer in API / CLI Discussion

API syntax fore creating inline-layer

Javier_Sanchez — Sat, 18 Nov 2017 10:09:17 GMT

Hi all,

ive been the last days searching and trying to figure out a way to add inline layes and subrules to the policy.

I'm working on a small puython script to translate some cisco asa configs to new R80 deployments, and

i would like to import the rules via the api.

I found some example for assigning an inline layer to a rule via the apply action, but does anyone know if its possible to create them from scratch directly in the rulebase ?

Regards

Javier Sanchez

‌ ‌

Re: API syntax fore creating inline-layer

Joshua_Hatter — Sun, 19 Nov 2017 04:17:50 GMT

You don't actually create an in-line layer per say, an in-line layer is just any layer you have applied as an action to a rule. So create a traditional access-layer, then assign it as your 'in-line' layer.

Hope that makes sense!

Re: API syntax fore creating inline-layer

Robert_Decker — Sun, 19 Nov 2017 08:30:03 GMT

Hi,

Try the SmartMove tool, it does exactly what you are struggling to accomplish...

It is Check Point's open source, based on API calls.

It generates bash scripts to migrate the database into CP.

Re: API syntax fore creating inline-layer

Javier_Sanchez — Mon, 20 Nov 2017 07:50:01 GMT

Hi,

thanks for the information, the tool looks promising but the migrations i need to accomplish include a number of releases that in mot cases are not even close to the supported 8.3. Nevertheless i tried the tool with some of the source configs and the result was quite good.

I have emplyed quite time developing some python scripts to generate the object named depending on the interface they are routed, and some other cosmetic small changes so for now i think i will stay there. In the specifica case im facing its only a migration from some of the interfaces, so i prefer not to create objects that are not used at the moment in the policy. I wonder why i did not find the tool 2 weeks ago, i could have used the output and make some easy filtering 😕

Regarding the policy, you are rigth Joshua, i created a new layer, added all the rules there and then manualy set the inline action redirection.

Regards

Javier Sanchez