Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Michel_de_Boer
Participant

SMB Export Access Policy to file

Hi all, we have a lot of SMB appliances in SMP and most of all are 1500's or above. So R80 embedded gaia.

Our goal is to export the Access Policy from the appliances and match them with a previous version if there were made any changes in the policy. First of all we need to export the policy to a file. In SMP I can run some show commands but an export or something will fail. I think those are gaia commands and not embedded gaia supported.

I've read and tried a lot of posts from others over here but those solutions are relevant to full blown gaia solutions.

Can somebody provide me a way how to achieve our goal?

0 Kudos
4 Replies

There is an option from CLI. Log into Expert Mode and issue:

[Expert]# clish -A -i -c "show configuration" -v >> /var/log/config.txt

Now, backup and delete /var/log/config.txt (by CLI or WinSCP) - it will contain all settings including policy !

CCSE CCTE CCSM SMB Specialist
Michel_de_Boer
Participant

Thanks for your reply, I've changed your command to:

clish -A -i -c "show access-rules type incoming-internal-and-vpn" -v >> /var/log/acl_incoming.txt
clish -A -i -c "show access-rules type outgoing" -v >> /var/log/acl_outgoing.txt

This output is in base what we are looking for.

Is there a way to upload them directly to a sftp server like we do with the backups? 

0 Kudos
Art_Zalenekas
Employee
Employee

Why not cook an Ansible playbook to do it all and download the configs to the right place!? Run it on weekly (whatever your SOP is) basis, and don't have so many custom scripts.

0 Kudos

My first idea was to point out these in the CLI Guide to you 😎. But then i thought you are better off with one command and a procedure. Good if these two outputs are enough to achieve your goal !

Usually, SCP is used for file transfer.

CCSE CCTE CCSM SMB Specialist
0 Kudos