cancel
Showing results for 
Search instead for 
Did you mean: 
Post a Question
Employee
Employee

Adding simple GW with several network interfaces using Web Services API

Jump to solution

Hi, API experts!

I'm trying to automatize adding simple GWs to my MGMT using API.

With mgmt cli it works perfectly:

mgmt add simple-gateway name "GW-R80.10-API" color "black" ipv4-address "192.168.48.199" version "R80.10" one-time-password "sic123" firewall true application-control true url-filtering true ips true anti-bot true anti-virus true interfaces.1.name "eth0" interfaces.1.ipv4-address "192.168.48.199" interfaces.1.ipv4-network-mask "255.255.255.0" interfaces.1.anti-spoofing true interfaces.1.topology "external" interfaces.2.name "eth1" interfaces.2.ipv4-address "192.168.10.199" interfaces.2.ipv4-network-mask "255.255.255.0" interfaces.2.anti-spoofing true interfaces.2.topology "internal" interfaces.2.topology-settings.ip-address-behind-this-interface "network defined by the interface ip and net mask"

But mgmt cli is not the thing I need, so Im trying to use Python script with Web Services API: 

>>> add_gw_data = {
... "name": "GW-R80.10-API",
... "color": "black",
... "ipv4-address": "192.168.48.199",
... "version": "R80.10",
... "one-time-password": "sic123",
... "firewall": "true",
... "application-control": "true",
... "url-filtering": "true",
... "ips": "true",
... "anti-bot": "true",
... "anti-virus": "true",
... "interfaces.1.name": "eth0",
... "interfaces.1.ipv4-address": "192.168.48.199",
... "interfaces.1.ipv4-network-mask": "255.255.255.0",
... "interfaces.1.anti-spoofing": "true",
... "interfaces.1.topology": "external",
... "interfaces.2.name": "eth1",
... "interfaces.2.ipv4-address": "192.168.10.199",
... "interfaces.2.ipv4-network-mask": "255.255.255.0",
... "interfaces.2.anti-spoofing": "true",
... "interfaces.2.topology": "internal",
... "interfaces.2.topology-settings.ip-address-behind-this-interface": "network defined by the interface ip and net mask"
... }
>>> add_gw = api_call(mgmt_ip_addr, "add-simple-gateway", add_gw_data, sid)
>>> print(json.dumps(add_gw))
{"message": "Unrecognized parameter [interfaces.2.name]", "code": "generic_err_invalid_parameter_name"}

How can I properly define all network interfaces?

Interfaces is List parameter, what is the proper syntax to define all the interfaces in this structure?

Thanks.

Labels (1)
1 Solution

Accepted Solutions
Employee
Employee

Re: Adding simple GW with several network interfaces using Web Services API

Jump to solution

Added a simple Python script, that

- creates internal network,

- creates single GW object with sic,

- adds MGMT rule to default Access policy, 

- publish and install Access policy to GW.

If you need a Threat Prevention policy installed, it should be installed after Access Policy, so you need to make some IF structure, that monitors successful installation of Access Policy before attempting a TP policy installation. 

I will upgrade script someday.

Cheers,

5 Replies
Employee
Employee

Re: Adding simple GW with several network interfaces using Web Services API

Jump to solution

The answer is:

"interfaces": [{
   "name": "eth0",
   "ipv4-address": "192.168.48.199",
   "ipv4-network-mask": "255.255.255.0",
   "anti-spoofing": "true",
   "topology": "external"
   },
   {
   "name": "eth1",
   "ipv4-address": "192.168.10.199",
   "ipv4-network-mask": "255.255.255.0",
   "anti-spoofing": "true",
   "topology": "internal",
   "topology-settings": {
      "ip-address-behind-this-interface": "network defined by the interface ip and net mask"
      }
   }
]

Employee++
Employee++

Re: Adding simple GW with several network interfaces using Web Services API

Jump to solution

Hi Sergey,

You should always go to the API docs and refs, you have some examples there how to do things.

There are examples for mgmt_cli tool and for web services as well, just select the required menu item on top.

For your case, go to this link and browse the second example.

Hope this helps.

Robert.

0 Kudos
Employee
Employee

Re: Adding simple GW with several network interfaces using Web Services API

Jump to solution

Added a simple Python script, that

- creates internal network,

- creates single GW object with sic,

- adds MGMT rule to default Access policy, 

- publish and install Access policy to GW.

If you need a Threat Prevention policy installed, it should be installed after Access Policy, so you need to make some IF structure, that monitors successful installation of Access Policy before attempting a TP policy installation. 

I will upgrade script someday.

Cheers,

Highlighted
Employee++
Employee++

Re: Adding simple GW with several network interfaces using Web Services API

Jump to solution

Good Work!

0 Kudos

Re: Adding simple GW with several network interfaces using Web Services API

Jump to solution

nice

0 Kudos