Using Small Office Appliance LSMcli ROBO Commands

AddROBO for Small Office Appliance Security Gateways

Syntax

LSMcli [-d] <server> <user> <pswd> AddROBO <Appliance_Model> <ROBOName> <Profile>
[-O=<ActivationKey> [-I=<IP>]] [[-CA=<CaName>
[-R=<CertificateIdentifier#>] [-KEY=<AuthorizationKey>]]

Parameters

Parameter	Description
`server`	Name/IP address of the Security Management Server or Domain Management Server
`user`	User name of standard Check Point authentication method.
`pswd`	Password of standard Check Point authentication method
`Appliance_Model`	Model of appliance: For 1100 appliances, enter `CPSG80` For 1200R appliances, enter `1200R` For 1430 or 1450 appliances, enter `1430/1450` For 1470 or 1490 appliances, enter `1470/1490`
`ROBOName`	Name of a SmartLSM Security Gateway.
`Profile`	Name of a SmartLSM Security Profile that was defined in SmartConsole.
`ActivationKey`	SIC one-time password (for this action, a certificate is generated).
`IP`	IP address of the gateway (for this action, a certificate is pushed to the gateway).
`CaName`	Name of the Trusted CA object (created from SmartConsole). The IKE certificate request is sent to this CA. Default is Check Point Internal CA.
`CertificateIdentifier#`	Key identifier for third-party CA.
`AuthorizationKey`	Authorization Key for third-party CA.

Examples

To add a 1100 appliance Security Gateway: LSMcli 192.168.3.26 aa aaaa AddROBO CPSG80 Paris_GW small_office_profile
To add a 1470/1490 appliance Security Gateway: LSMcli 192.168.3.26 aa aaaa AddROBO 1470/1490 Paris_GW small_office_profile

AddRobo for Small Office Appliance Clusters

Syntax

AddROBO <Appliance_Model>Cluster <Profile> <MainIPAddress> <SuffixName> [-S=<SubstitutedNamePart>]
[-CA=<CaName> [-R=<KeyIdentifier#>] [-KEY=<AuthorizationCode>]]

Parameters

Parameter	Description
`<Appliance_Model>Cluster`	Model of appliance: For 1100 appliances, enter `CPSG80Cluster` For 1200R appliances, enter `1200RCluster` For 1430 or 1450 appliance, enter `1430/1450Cluster` For 1470 or 1490 appliance, enter `1470/1490Cluster`
`Profile`	Name of cluster Profile to which to map the new cluster.
`MainIPAddress`	Main IP address of cluster.
`SuffixName`	A suffix to be added to cluster and member Profile names.
`SubstitutedName` `Part`	A part of the Profile name to be replaced by the suffix in the previous field.
`CAName`	The name of the Trusted CA object, defined in SmartConsole, to which a VPN certificate request is sent.
`KeyIdentifier#`	Number to identify the specific certificate, once generated.
`AuthorizationCode`	Authorization Key to be sent to CA to enable certificate retrieval.

Example:

To add a 1450 cluster: LSMcli 192.168.3.26 aa aaaa AddRobo 1430/1450Cluster cluster_profile 1.1.1.1 Paris

Other Commands for Small Office Appliance Security Gateways or Clusters

For all other commands on Small Office Appliance Gateways, replace VPN1 with CPSG80, for all appliance types.
For example:
- To change the profile of a 1100 Security Gateway:
  LSMcli 192.168.3.26 aa aaaa ModifyROBO CPSG80 Paris_GW -P=second_small_office_profile
- To change the profile of a 1200R Security Gateway:
  LSMcli 192.168.3.26 aa aaaa ModifyROBO CPSG80 Paris_GW -P=second_small_office_profile
For all other commands on Small Office Appliance clusters, replace VPN1Cluster with CPSG80Cluster, for all appliance types.