LSMcli ModifyROBO VPN1

Description

This command modifies a Check Point SmartLSM Security GatewayClosed Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources..

This action modifies the SmartProvisioningClosed Check Point Software Blade on a Management Server (the actual name is "Provisioning") that manages large-scale deployments of Check Point Security Gateways using configuration profiles. Synonyms: Large-Scale Management, SmartLSM, LSM. details for an existing SmartLSM Security Gateway and can be used to update properties previously supplied by the user.

Syntax

LSMcli [-d] <Mgmt Server> <Username> <Password> ModifyROBO VPN1 <RoboName> ...

and at least one of these:

... [-P=Profile] [-RoboCluster={<OtherROBOName> | -NoRoboCluster}] [-D:<DO Name>=<IP1>[-<IP2>] [-KeepDOs]...]

Parameters

Parameter

Description

<Mgmt Server>

Name or IP address of the Security Management ServerClosed Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server. or Domain Management ServerClosed Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server..

<Username>

User name of standard Check Point authentication method.

<Password>

Password of standard Check Point authentication method.

<RoboName>

Name of the SmartLSM Security Gateway.

<Profile>

Name of a SmartLSM Security Profile that was defined in SmartConsoleClosed Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on..

<OtherROBOName>

Name of the already defined SmartLSM Security Gateway that is to participate in the ClusterClosed Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. with the newly created Security Gateway (if the "-RoboCluster" argument is provided).

-NoRoboCluster

This parameter is equivalent to the Remove Cluster operation in the SmartProvisioning GUI.

When you issue a ModifyROBO VPN1 command with this argument on a Security Gateway that participates in a cluster, the cluster is removed.

<DO Name>

Name of the Dynamic ObjectClosed Special object type, whose IP address is not known in advance. The Security Gateway resolves the IP address of this object in real time..

<IP1>

Single IP address for the Dynamic Object.

<IP1-IP2>

Range of IP addresses for the Dynamic Object.

-KeepDOs

Keeps all existing dynamic objects in the dynamic objects list when you add new dynamic objects.

If a dynamic object already exists in the list, its IP resolution is updated.

If this flag is not specified, the dynamic objects list is deleted when you use the LSMcli command to add new dynamic objects.

Example

This example resolves Dynamic Objects for the given Security Gateway.

LSMcli mySrvr name pass ModifyROBO VPN1 MyRobo -D:MyEmailServer=123.45.67.8 -D:MySpecialNet=10.10.10.1-10.10.10.6