dynamic_objects
Description
Manages dynamic objects and their applicable ranges of IP addresses on the Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. / Cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. Members / Scalable Platform Security Group.
|
Important:
|
Workflow
Step |
Instructions |
---|---|
1 |
|
2 |
On the Security Gateway / each Cluster Member Security Gateway that is part of a cluster. / Security Group, run the "
|
General syntax on a Security Gateway / Cluster Member in the Expert mode
|
General syntax on a Scalable Platform Security Group in the Expert mode
|
Syntax for specific commands
-
To show all configured dynamic objects and their ranges of IP addresses:
dynamic_objects -l
-
To create a new dynamic object (and assign a range of IP addresses to it):
dynamic_objects -n <Object Name> [-r <FromIP1> <ToIP2> ... [<FromIPx> <ToIPy>] -a]
-
To add a new a range of IP addresses to the specific existing dynamic object:
dynamic_objects -o <Object Name> -r <FromIP1> <ToIP2> ... [<FromIPx> <ToIPy>] -a
-
To delete a range of IP addresses from the specific existing dynamic object:
dynamic_objects -o <Object Name> -r <FromIP1> <ToIP2> ... [<FromIPx> <ToIPy>] -d
-
To update the specific existing dynamic object (and assign a different range of IP addresses to it):
dynamic_objects -u <Object Name> [-r <FromIP1> <ToIP2> ... [<FromIPx> <ToIPy>]]
-
To compare the configured dynamic objects and objects configured in SmartConsole:
dynamic_objects -c
-
To delete the specific existing dynamic object (and all ranges of IP addresses assigned to it):
dynamic_objects -do <Object Name>
-
To delete all the existing dynamic objects (and all ranges of IP addresses assigned to them):
dynamic_objects -e
Parameters
Parameter |
Description |
||
---|---|---|---|
|
Specifies the name of the object:
|
||
|
Specifies the ranges of IP addresses in the format of pairs:
For example, to specify two ranges, from 192.168.2.30 to 192.168.2.40 and from 192.168.2.50 to 192.168.2.60, enter these four IP addresses:
|
||
|
Adds the specified ranges of IP addresses to the specified dynamic object. |
||
|
Compare the dynamic objects in the dynamic objects database ( |
||
|
Deletes range of IP addresses from the dynamic object. |
||
|
Deletes the specified dynamic object. |
||
|
Deletes all configured dynamic objects from the dynamic objects database ( |
||
|
Lists the configured dynamic objects in the dynamic objects database ( |
||
|
Creates a new dynamic object. |
||
|
Updates the specified dynamic object. If you specify a range of IP addresses, then the new range replaces all current ranges that are currently assigned to this dynamic object. |
Example 1 - Create a new dynamic object named "bigserver" and assign to it the range of IP addresses 192.168.2.30-192.168.2.40
Run either these two commands:
|
|
Or this single command:
|
Example 2 - Update the ranges of IP addresses assigned to the dynamic object named "bigserver" from the current range to the new range 192.168.2.60-192.168.2.80
|