- Products
- Learn
- Local User Groups
- Partners
- More
MVP 2026: Submissions
Are Now Open!
What's New in R82.10?
Watch NowOverlap in Security Validation
Help us to understand your needs better
CheckMates Go:
Maestro Madness
I'm running SmartCenter R80.40 jumbo 126. While trying to learn to ingest cluster objects and their members, I ran into a lot of weird inconsistencies:
[Expert@LabSC]# mgmt_cli --format json -r true show gateways-and-servers details-level full
{
"objects" : [ {
...
}, {
"uid" : "b4105bbc-602f-4fe8-8ac7-b3cd0f754b48",
"name" : "NormalCluster",
"type" : "CpmiGatewayCluster",
"domain" : {...},
"policy" : { },
"operating-system" : "Gaia",
"hardware" : "Open server",
"version" : "R80.40",
"ipv4-address" : "10.100.1.1",
"interfaces" : [ {...}, {...} ],
"network-security-blades" : {
"firewall" : true
},
"management-blades" : { },
"cluster-member-names" : [ "NormalMember1", "NormalMember2" ],
...
}, {
"uid" : "37e305c9-5050-4c69-a2e5-d7aa1578af01",
"name" : "NormalMember1",
"type" : "CpmiClusterMember",
"domain" : {...},
"policy" : { },
"ipv4-address" : "10.100.1.2",
"interfaces" : [ {...} ],
...
[Expert@LabSC]# mgmt_cli --format json -r true show object details-level full uid b4105bbc-602f-4fe8-8ac7-b3cd0f754b48
{
"object" : {
"uid" : "b4105bbc-602f-4fe8-8ac7-b3cd0f754b48",
"name" : "NormalCluster",
"type" : "simple-cluster",
"domain" : {...},
"cluster-mode" : "cluster-xl-ha",
"cluster-members" : [ {
"name" : "NormalMember1",
"sic-state" : "uninitialized",
"sic-message" : "Uninitialized",
"ip-address" : "10.100.1.2",
"interfaces" : [ {
"name" : "eth0",
"ipv4-address" : "10.100.1.2",
"ipv4-network-mask" : "255.255.255.0",
"ipv4-mask-length" : 24,
"ipv6-address" : ""
}, {
"name" : "eth1",
"ipv4-address" : "10.100.0.1",
"ipv4-network-mask" : "255.255.255.252",
"ipv4-mask-length" : 30,
"ipv6-address" : ""
}, {
"name" : "eth2",
"ipv4-address" : "10.100.2.2",
"ipv4-network-mask" : "255.255.255.0",
"ipv4-mask-length" : 24,
"ipv6-address" : ""
} ]
}, {...} ],
"interfaces" : {
"total" : 3,
"from" : 1,
"to" : 3,
"objects" : [ {
...
[Expert@LabSC]# mgmt_cli --format json -r true show object details-level full uid 37e305c9-5050-4c69-a2e5-d7aa1578af01
{
"object" : {
"uid" : "37e305c9-5050-4c69-a2e5-d7aa1578af01",
"name" : "NormalMember1",
"type" : "CpmiClusterMember",
"domain" : {...},
"color" : "black",
"natSummaryText" : "None",
"meta-info" : {...},
"tags" : [ ],
"icon" : "NetworkObjects/Cluster_member",
"comments" : "",
"display-name" : "",
"customFields" : null,
"ipv4-address" : "10.100.1.2",
"ipv6-address" : ""
}
}
The cluster changes type. In 'show gateways-and-servers', its type is CpmiGatewayCluster. In 'show object', its type is "simple-cluster".
In 'show gateways-and-servers', there is no 'cluster-mode' property for the cluster.
In 'show gateways-and-servers', the cluster's 'interfaces' property is an array. In 'show object', it's a single JSON object which then contains an array of objects.
In 'show gateways-and-servers', there is a 'cluster-member-names' property, which then changes to a 'cluster-members' property in 'show object'. Neither version seems to have an option to include the members' UUIDs.
In 'show gateways-and-servers', the member has an array of interfaces. In 'show object', that's totally missing.
The command show-object for cluster returns the reply of show-simple-cluster :
https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/show-simple-cluster~v1.6.1%20
Okay, but that doesn't really address the inconsistencies. A simple-gateway object's interfaces property is an array. A simple-cluster object's interfaces property is an object which contains an array (same container schema as 'show objects'). I would also really like the cluster member's UUID in its representation in the cluster object, and the member's interfaces in its 'show object' representation.
It's weird that these various views of the objects don't give me consistent or complete information about them. I would expect at least one of those properties.
Separately, I just realized a possible implication of the simple-cluster object's interfaces being in a container object with from, to, and total properties: all the other contexts where I've seen that wrapper have the ability to show starting at an offset. What happens if the cluster has more than 500 interfaces? Do I only get some of them?
Are interfaces full objects with a UUID internally?
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 4 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Tue 16 Dec 2025 @ 05:00 PM (CET)
Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!Thu 18 Dec 2025 @ 10:00 AM (CET)
Cloud Architect Series - Building a Hybrid Mesh Security Strategy across cloudsTue 16 Dec 2025 @ 05:00 PM (CET)
Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!Thu 18 Dec 2025 @ 10:00 AM (CET)
Cloud Architect Series - Building a Hybrid Mesh Security Strategy across cloudsAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY