Adding a VSX Gateway

Description

This command lets you add a new VSX Gateway object.

Syntax

add vsx type gateway name <Object Name> version <Version> main_ip <Main IPv4 Address> main_ip6 <Main IPv6 Address> sic_otp <Activation Key> [rule_snmp {enable|disable}] [rule_ssh {enable|disable}] [rule_ping {enable|disable} [rule_ping6 {enable|disable}] [rule_https {enable|disable}] [rule_drop {enable|disable}]

Note - In this transaction, you can only add the set physical interface command.

Parameters

Parameter	Expected Value	Description
`type`	`gateway`	You must use the `gateway` value to add a new VSX Gateway object.
`name <`Object Name`>`	Object name	Specifies the name of the VSX Gateway object. You cannot use spaces of Check Point reserved words.
`version <`Version`>`	Check Point version	Specifies the Check Point version of the VSX Gateway object. You must enter the exact version as appears in SmartConsole (case-sensitive).
`main_ip <`Main IPv4 Address`>`	IPv4 Address	Specifies the main IPv4 Address of the VSX Gateway object.
`main_ip6 <`Main IPv6 Address`>`	IPv6 Address	Specifies the main IPv6 Address of the VSX Gateway object.
`sic_otp <`Activation Key>	SIC password	You must enter the same Activation Key you entered during the First Time Configuration Wizard of the VSX Gateway.
`rule_snmp {enable \| disable}`	`enable` `disable`	Controls how to process all SNMP packets sent to the VSX Gateway: `enable` - Allows all SNMP packets `disable` - Drops all SNMP packets (default)
`rule_ssh {enable \| disable}`	`enable` `disable`	Controls how to process all SSH packets sent to the VSX Gateway: `enable` - Allows all SSH packets `disable` - Drops all SSH packets (default)
`rule_ping {enable \| disable}`	`enable` `disable`	Controls how to process all ICMP Echo Request (ping) packets sent to the VSX Gateway: `enable` - Allows all IPv4 ping packets `disable` - Drops all IPv4 ping packets (default)
`rule_ping6 {enable \| disable}`	`enable` `disable`	Controls how to process all ICMPv6 Echo Request (ping) packets sent to the VSX Gateway: `enable` - Allows all IPv6 ping packets `disable` - Drops all IPv6 ping packets (default)
`rule_https {enable \| disable}`	`enable` `disable`	Controls how to process all HTTPS packets sent to the VSX Gateway: `enable` - Allows all HTTPS packets `disable` - Drops all HTTPS packets (default)
`rule_drop {enable \| disable}`	`enable` `disable`	Controls how to process all packets (other than SNMP, SSH, ICMP, ICMPv6, HTTPS) sent to the VSX Gateway: `enable` - Drops all other packets (default) `disable` - Allows all other packets

Example

vsx_provisioning_tool -s localhost -u admin -p mypassword -o add vsx name VSX_GW1 type gateway main_ip 192.168.20.1 version R80.10 sic_otp ABCDEFG rule_ssh enable rule_ping enable