Hi group,
First let me thank you for all your help in the past. I really appreciate
it.
Secondly, I would like to discuss what I am trying to before I ask the
question I have. I want to automate the installation and configuration of
several firewalls we have in our company.
My question is the following:
I have a question regarding scripts on Clish. On netscreen, and on CISCO PIX
there is a way for copying your current config and modifying it and pasting
it back again after changes were made. For instance, if I wanted to copy the
current config from one firewall and paste it on another on a netscreen
firewall I can easily do that. If I wanted to change some interfaces I can
get the copied config file, make some changes and paste it on the new
firewall. What I am trying to get at is that I would like to do the same on
my Checkpoint firewalls to automate the configuration, thereby saving time.
I was wondering if that was possible.
I know that in Clish you can write scripts to help you set the variables you
want.. such as:
set net-access tftp no
set net-access telnet no
set net-access admin-net-login yes
set net-access com2-login no
set net-access com3-login no
set net-access com4-login no
set ssh server enable 1
set ssh server protocol 2
etc etc.
I would like to know if there is any command that will show me this format
of the configuration so that I can just modify the variables I would like to
be different and paste it according to the new parameters I want on a new
firewall. On Netscreen if you do a "show config" it will show you the
configuration, similar to a Cisco router. Can you do this with Checkpoint
and if so, what is the command?
Thank you.
Claudio
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
