Get bash to Cluster member from Management

[mnocciolino]

Hi,

This is my seccond post. Enjoy!!

This procedure is for accessing a firewall from the Management, using rshell with

cprid_util 

Tested in R81, R81.10.

Not test in R80.XX, but i think will be work

Prerequisites:

- Access to Management

1) Access via SSH to Management.

Execute the script rshell.sh attached

In the 1st field put the Management IP

In the 2nd field put the Gateway IP

2) After entering the 2 IPs, you will get access to the Gateway without password as admin user.

This is a not bash console, to jump bash you need put the detail commands.

script /dev/null -c bash
PRESS -> "CTRL+Z"
stty raw -echo; fg
reset xterm

3) After entering the commands, you will have access to the Gateway. 

4) After you finish using, and try to exit, you will get the following (broken terminal):

to mitigate this, enter the command: "reset xterm" or close the terminal and open a new one.

-----------

Any suggestions or comments are welcome

mnocciolino

[PhoneBoy]

cprid has been there for quite some time (going back to at least R5x days).
It also works on SMB appliances, though be aware of this: https://community.checkpoint.com/t5/SMB-Gateways-Spark/Output-of-cprid-truncated-after-receiving-600...

However, I'm pretty sure it's not meant for interactive use, only executing specific commands.
Therefore, you might find some issues that result from using it in this manner.

[mnocciolino]

Hi PhoneBoy,

I only use cprid to execute the "rshell" command, I do not use cprid to transmit data.

I used this to reset the admin password, because they didn't remember the password.
I also used it once because there was no way to reach the management ip, and I logged in to see what the problem might be.

thank you for your reply.

[PhoneBoy]

It's not the transmission of data that's an issue, it's the interactive nature of using a shell as you're doing.
Like I said, not sure how that will work over cprid in every case, but it is clever.