3. SmartTask

Objective

Using the SmartTask feature of R81, enable a verification process that verifies the user cpx_user is allowed to make changes to hosts and networks with the tag “Web_Control”. Other changes should be not permitted and publishes should fail.

Instructions

Step

Instructions

1

From the R81.10 Manager SSH shell run the following script under /home/admin/R8X_Mgmt_Scripts:

bash Setup_SmartTask.sh

Answer the questions with the following information (Case is sensitive!!!) :

  1. admin : cpx_user

  2. tag name : Web_Control

2

Review the new SmartTask that was created :

3

Review the “Pre Publish Tag Check”. Notice the information we entered is part of the Custom Data. This is the user and tag we will pass to the script when checking when Publishing changes.

4

Next, we will add a host without the required tag and see the result.

Use the following command and login as cpx_user:

mgmt_cli -u cpx_user -p vpn123 add-host name Task4Host ip-address 44.44.44.44

5

Now add the tag to the same command and see the result.

The command is all one line (tag name is case sensitive!) :

mgmt_cli -u cpx_user -p vpn123 add-host name Task4Host ip-address 44.44.44.44 tags.1 "Web_Control"

6

The SmartTask allows a publish operation to occur since the tag is specified in the request:

7

Delete the added SmartTask from SmartConsole and Publish changes.