Print Download PDF Send Feedback

Previous

Next

AddROBO VPN1Edge

This command adds a new UTM-1 Edge SmartLSM Security Gateway. Applicable for UTM-1 Edge devices only.

Use this command to add a new UTM-1 Edge device to the SmartProvisioning system and assign it a specified SmartLSM Security Profile. Specify the product type of the UTM-1 Edge device and the firmware installed, which can be set as local, default or user-defined. It is also possible to assign an IP address range to Dynamic Objects, specifying whether to add them to the VPN domain.

To load new firmware on the UTM-1 Edge device, use SmartUpdate.

Usage

LSMcli [-d] <server> <user> <pswd> AddROBO VPN1Edge<RoboName> <Profile> <ProductType>
[-RoboCluster=<OtherROBOName>] [-O=<RegistrationKey>] [[-CA=<CaName>
[-R=<CertificateIdentifier#>][-KEY=<AuthorizationKey>]]] [-F=LOCAL|DEFAULT|<Firmware-name>]
[-M=<MAC>] [-K=<ProductKey>] [-D[E]:<D.O. name>=<IP1>[-<IP2>] [-D[E]:...]]

Parameters

AddROBO UTM-1 Edge Parameters

Parameter

Description

server

Name/IP address of the Security Management Server or Domain Management Server.

user

User name of standard Check Point authentication method.

pswd

Password of standard Check Point authentication method.

RoboName

Name of the UTM-1 Edge device.

Profile

Name of a SmartLSM Security Profile that was defined in SmartConsole.

ProductType

Product type.

OtherROBOName

Name of the already defined SmartLSM UTM-1 Edge device that participates in the SmartLSM Cluster with the newly created UTM-1 Edge device (if the -RoboCluster argument is provided).

RegistrationKey

Registration Key.

CaName

Name of the Trusted CA object (created from SmartConsole). The IKE certificate request is sent to this CA.

CertificateIdentifier#

Key identifier of the specific certificate.

AuthorizationKey

Authorization Key that is sent to the CA for certificate retrieval.

Firmware-name

Firmware name, or LOCAL or DEFAULT.

MAC

Mac address of the UTM-1 Edge, in the format xx:xx:xx:xx:xx:xx where "x" is a hexadecimal digit.

ProductKey

Product key (license), in the format xxxxxx-xxxxxx-xxxxxx, where "x" is a hexadecimal digit.

DO Name

Name of the Dynamic Object.

E

Obsolete, refer to the LSMcli command: ModifyROBOManualVPNDomain.

Ip1-Ip2

IP address range for the Dynamic Object.

Example

LSMcli mySrvr name pass AddROBO VPN1Edge MyRobo AnyProfile SBox-100

This example creates an object in SmartProvisioning for a UTM-1 Edge SmartLSM Security Gateway called MyRobo, based on a SmartLSM Security Profile defined in SmartConsole called AnyProfile. MyRobo is defined for a UTM-1 Edge on an SBox-100 device.

LSMcli mySrvr name pass AddROBO VPN1Edge MyRobo AnyProfile IP30 -O=AnyRegKey
-F=DEFAULT – M=00:08:AA:BB:CC:DD -K=123456-ABCDEF-ABC123

LSMcli mySrvr name pass AddROBO VPN1Edge MyRobo AnyProfile SBox-100
-F=Safe@_Safe@_3.0.23_Generic_Safe@_fcs