- CheckMates
- :
- Products
- :
- Developers
- :
- API / CLI Discussion
- :
- How to enable accounting using API
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to enable accounting using API
Hi Team,
We have over 1500+ rules on our Management servers on which Accounting is not enabled.
We are now requested to enable Accounting on all this rules(ACL) by our Management. Can you please let us know, if accounting can be enabled using API's on all the policy's.
If this is possible, can you please provide us the valid document to perform the same.
Version: R81.10
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I second what PhoneBoy mentioned.
If this is supposed to be one-time action, then why wasting time to write a script / wait for replies in community? Just reserve some spare time (overtime) and do that monkey job manually. You would have been already done 🙂
Jozko Mrkvicka
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You will have to write code that parses the policy layers and updates the individual rules via API calls.
There is nothing pre-built that does this.
However, I don't believe this is entirely necessary.
You might be able to just create an ordered layer AFTER your existing one(s) that is a simple "any any accept" with track set to accounting.
The only way traffic will reach this layer is if it matches an Accept rule in the previous layer(s).
This will cause ALL traffic that reaches this rule to log Accounting, which will effectuate the same result (all accept logs include Accounting data).
This will only work with R8x gateways (R77.x and earlier do not support policy layers).
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I second what PhoneBoy mentioned.
If this is supposed to be one-time action, then why wasting time to write a script / wait for replies in community? Just reserve some spare time (overtime) and do that monkey job manually. You would have been already done 🙂
Jozko Mrkvicka
