- Products
- Learn
- Local User Groups
- Partners
- More
Welcome to Maestro Masters!
Talk to Masters, Engage with Masters, Be a Maestro Master!
Join our TechTalk: Malware 2021 to Present Day
Building a Preventative Cyber Program
Be a CloudMate!
Check out our cloud security exclusive space!
Check Point's Cyber Park is Now Open
Let the Games Begin!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
CheckFlix!
All Videos In One Space
Hi,
i wrote below script for my customer to automate gaia configuration backup of gateway . Script runs on management and it can fetch the "show configuration" of all the gateway and create a file for individual gateway .
Steps :
Perform below on management server .
*****************************************
[Expert@PROD-MGMT-R80:0]# cat gaiafwbkp.sh
#!/bin/sh
source /opt/CPshrd-R80/tmp/.CPprofile.sh
for dest in $(<gateway_ip_list.txt); do
hostname=`cprid_util -server $dest -verbose rexec -rcmd /bin/bash -c "hostname"`
now=$(date +"%m_%d_%Y")
cprid_util -server $dest -verbose rexec -rcmd /bin/clish -c "show configuration" > /var/log/gaiagwbkp/$hostname$now
done
************************************
4. run script gaiafwbkp.sh
5. Schedule job from GAIA portal using job scheduler
6. if needed you can run another job to ftp this backup files to ftp server as well
Thanks for sharing, very useful.
Nice!
CDT only works on R77.30 and later.
I could see this script being useful on older systems, potentially.
That said, I must provide a word of caution with this approach.
Especially in some earlier versions of Gaia, the order that "show configuration" outputs the commands in won't necessarily work when you import that same configuration.
@PhoneBoy , yep: the add and set sequence gets out of whack. Still seeing it happening when attempting to replicate old Gaia configs on the newly deployed gateways using output of "show configuration".
Theoretically, pasting this file twice should solve these issues, as the prerequisites will take effect in the first pass and dependent settings in second.
sk111158: Central Deployment Tool (CDT)
I love this idea, and the script works great if I run it manually but has anyone been able to make it run via Job Scheduler? Doesn't work for me. Running R80.30. I have updated the relevant paths to R80.30 and even went so far as to add an absolute path for cprid_util, still nothing.
Thanks for any suggestions
Andrew
Just install CDT on your management, edit $CDTDIR/CentralDeploymentTool.xml to your needs and add the following line to the job scheduler of your management server:
source /etc/profile.d/CP.sh; . $CDTDIR/CentralDeploymentTool -rma -backupall 2>/dev/null
Late to the show but maybe this helps anyone else: For me, a similar solution worked only after adding hostname entries for the gateways. And I had to remove nonprintables from hostnames which did get there anyhow I dont know. You may find scripts for adding hostnames and doing config backups on my Github repository (https://github.com/dj0nz/cptools).
But I agree with other comments here: Check out CDT if you can spare the time. Probably the better long-term solution.
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY