Connecting to a Specific Security Group Member (member)

You can connect to the command line of a specific Security GroupClosed A logical group of Security Appliances that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. Every Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected. Member in a Security Group in several ways.

Step

Instructions

1

Connect to the command line on the Quantum Maestro OrchestratorClosed A scalable Network Security System that connects multiple Check Point Security Appliances into a unified system. Synonyms: Orchestrator, Quantum Maestro Orchestrator, Maestro Hyperscale Orchestrator. Acronym: MHO..

2

Examine the configured Security Group and its Security Group Members.

  • In the Gaia Clish, run:

    show maestro security-group id <Security Group ID>

  • In the Expert mode, run:

    clish -c "show maestro security-group id <Security Group ID>"

3

Make sure to log in to the Expert mode.

4

Connect to a Security Group Member in the Security Group with one of these commands:

member <Security Group ID>_<Member ID>

m <Security Group ID>_<Member ID>

5

Log in.

Example:

[Expert@Orch:0]# member 1 3

Moving to member 3 in security group 1 (198.51.101.3)

admin@198.51.101.1's password: *****

Last login: Mon Jan 28 17:05:23 2019 from 198.51.101.126

You have logged into the system.

[Expert@SG1-ch01-03:0]#

Step

Instructions

1

Connect to the command line of the Security Group over SSH at:

<IP Address of Security Group>

Important - This connection goes through the Quantum Maestro Orchestrator management interface you assigned to this Security Group.

2

Log in to the Expert mode.

3

Connect to a Security Group Member in the same Security Group with one of these commands:

member <Member ID>

m <Member ID>

Example:

[Expert@SG1-ch01-03:0]# m 2

Moving to member 1_2

This system is for authorized use only.

Last login: Mon Jan 28 17:07:45 2019 from 192.0.2.1

You have logged into the system.

[Expert@SG1-ch01-02:0]#

Notes:

  • To go back to the previous Security Group Member, run the exit command.

  • You open many SSH sessions to Security Group Members.

  • When you connect to a Security Group Member from the Quantum Maestro Orchestrator or from another Security Group Member, the new SSH connection goes over an internal Quantum Maestro Orchestrator network.

Step

Instructions

1

Connect to the command line on the Quantum Maestro Orchestrator.

2

Examine the configured Security Group and its Security Group Members.

  • In the Gaia Clish, run:

    show maestro security-group id <Security Group ID>

  • In the Expert mode, run:

    clish -c "show maestro security-group id <Security Group ID>"

3

Make sure to log in to the Expert mode.

4

Connect to a Security Group Member in the Security Group with one of these commands:

member <Security Group ID>_<Member ID>

m <Security Group ID>_<Member ID>

5

Log in.

Example:

[Expert@Orch:0]# member 1 3

Moving to member 3 in security group 1 (198.51.101.3)

admin@198.51.101.1's password: *****

Last login: Mon Jan 28 17:05:23 2019 from 198.51.101.126

You have logged into the system.

[Expert@SG1-ch01-03:0]#

Step

Instructions

1

Connect to the command line of the Security Group over SSH at:

<IP Address of Security Group>

Important - This connection goes through the Quantum Maestro Orchestrator management interface you assigned to this Security Group.

2

Log in to the Expert mode.

3

Connect to a Security Group Member in the same Security Group with one of these commands:

member <Member ID>

m <Member ID>

Example:

[Expert@SG1-ch01-03:0]# m 2

Moving to member 1_2

This system is for authorized use only.

Last login: Mon Jan 28 17:07:45 2019 from 192.0.2.1

You have logged into the system.

[Expert@SG1-ch01-02:0]#

Notes:

  • To go back to the previous Security Group Member, run the exit command.

  • You open many SSH sessions to Security Group Members.

  • When you connect to a Security Group Member from the Quantum Maestro Orchestrator or from another Security Group Member, the new SSH connection goes over an internal Quantum Maestro Orchestrator network.