Can somebody tell me if there is any possibility how to add a Cluster to the Mgmt (CMA) over the API?
I found only the "add-simple-gateway" but nothign else?
Thanks for info
Adding cluster objects is one of the handful of operations that still require the use of CPMI and not the R80 API.
It's something planned to be addressed in a later release.
OK, does the Check Point has any estimation when this feature coudl be part of the API?
Could you send me any reference to documentation how to use CPMI to build a cluster by script ?
To my knowledge, the timelines for incorporating this into the API have not been finalized.
I'm also not aware of any documentation for building a cluster using dbedit (the scriptable way to use CPMI) or if it is even possible.
I would communicate your requirements in this area to your Check Point SE, if you haven't already.
I have managed in the past to build a cluster object using dbedit. It was not without issues though and I think I ended up deleting and creating the cluster object manually in the end.
The topology of the cluster had to be completed manually (I was reverse engineering using GUIDBedit and couldn't work out the dbedit commands for cluster topology (I think I ran out of time)) and a SIC reset also had to be done. I had used the CLI to push SIC certificates. Perhaps the SIC trust pulled from the server rather than pushed is better since a topology get occurs during SIC establishment.
Would be good to know when the API is up to the job (although I am about to look into it on R80.10) and until then if there is a work around until then. That is, other than simple objects created in API to half complete the job of creating the cluster object.
Thanks to Nicolas Boisse, you can use this utility - https://community.checkpoint.com/docs/DOC-2625.
Also, please note my caveat there.
Retrieving data ...