{"id":30752,"date":"2019-10-31T21:37:15","date_gmt":"2019-10-31T18:37:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/5-check-point-getting-started-r80-20-gaia-cli\/"},"modified":"2019-10-31T21:37:15","modified_gmt":"2019-10-31T18:37:15","slug":"5-check-point-getting-started-r80-20-gaia-cli","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/5-check-point-getting-started-r80-20-gaia-cli","title":{"rendered":"5. Check Point Za\u010d\u00edn\u00e1me R80.20. Gaia & CLI","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"5.
\n
\nV\u00edtejte na 5. lekci! Minule jsme dokon\u010dili instalaci a inicializaci management serveru a tak\u00e9 br\u00e1ny. Dnes se tedy trochu \u201epobav\u00edme\u201c o jejich vnit\u0159nostech, konkr\u00e9tn\u011b o nastaven\u00ed opera\u010dn\u00edho syst\u00e9mu Gaia. Nastaven\u00ed Gaia lze rozd\u011blit do dvou hlavn\u00edch kategori\u00ed:<\/p>\n

    \n
  1. Syst\u00e9mov\u00e1 nastaven\u00ed<\/b> (IP adresy, Routing, NTP, DNS, DHCP, SNMP, z\u00e1lohy, syst\u00e9mov\u00e9 aktualizace atd.). Tyto parametry se nastavuj\u00ed prost\u0159ednictv\u00edm WebUI nebo CLI;<\/li>\n
  2. Nastaven\u00ed zabezpe\u010den\u00ed<\/b> (V\u0161echno, co se t\u00fdk\u00e1 Access Lists, IPS, Anti-Virus, Anti-Spam, Anti-Bot, Application Control atd. Tedy ve\u0161ker\u00e9 bezpe\u010dnostn\u00ed funkce). Pro to se u\u017e pou\u017e\u00edv\u00e1 SmartConsole nebo API.<\/li>\n<\/ol>\n

    \nV t\u00e9to lekci budeme diskutovat o prvn\u00edm bodu, tedy Syst\u00e9mov\u00fdch nastaven\u00edch.<\/a><\/noindex>
    \nJak jsem ji\u017e zm\u00ednil, tato nastaven\u00ed lze upravit bu\u010f prost\u0159ednictv\u00edm webov\u00e9ho rozhran\u00ed, nebo prost\u0159ednictv\u00edm p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku. Poj\u010fme za\u010d\u00edt s webov\u00fdm rozhran\u00edm.<\/p>\n

    Gaia Portal<\/h3>\n

    \nNaz\u00fdv\u00e1 se Gaia Portal, v terminologii Check Point. P\u0159\u00edstup k n\u011bmu lze z\u00edskat pomoc\u00ed prohl\u00ed\u017ee\u010de, \u201ezaklep\u00e1n\u00edm\u201c na https na IP adresu za\u0159\u00edzen\u00ed. P\u0159itom jsou podporov\u00e1ny prohl\u00ed\u017ee\u010de Chrome, Firefox, Safari a IE. Dokonce i Edge funguje, i kdy\u017e nen\u00ed na seznamu ofici\u00e1ln\u011b podporovan\u00fdch. Vypad\u00e1 to takto:<\/p>\n

    \"5.
    \n
    \nPodrobn\u011bj\u0161\u00ed popis port\u00e1lu, jako\u017e i nastaven\u00ed rozhran\u00ed a v\u00fdchoz\u00edho sm\u011bru najdete ve videolekci n\u00ed\u017ee.
    \nNyn\u00ed se pod\u00edvejme na p\u0159\u00edkazov\u00fd \u0159\u00e1dek.<\/p>\n

    Check Point CLI<\/h3>\n

    \nSt\u00e1le se traduje n\u00e1zor, \u017ee Check Point nelze spravovat z p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku. To nen\u00ed pravda. Prakticky v\u0161echna syst\u00e9mov\u00e1 nastaven\u00ed lze upravit v CLI (ve skute\u010dnosti lze m\u011bnit i bezpe\u010dnostn\u00ed nastaven\u00ed pomoc\u00ed Check Point API). Existuje n\u011bkolik zp\u016fsob\u016f, jak se dostat do CLI:<\/p>\n

      \n
    1. P\u0159ipojit se k za\u0159\u00edzen\u00ed p\u0159es konzolov\u00fd port.<\/li>\n
    2. P\u0159ipojit se p\u0159es SSH (Putty, SecureCRT atd.).<\/li>\n
    3. P\u0159ej\u00edt do CLI ze SmartConsole.<\/li>\n
    4. Nebo z webov\u00e9ho rozhran\u00ed kliknut\u00edm na ikonu \"Otev\u0159\u00edt termin\u00e1l\" v horn\u00edm panelu.<\/li>\n<\/ol>\n

      \nSymbol ><\/b> znamen\u00e1, \u017ee jste v defaultn\u00edm shellu, kter\u00fd se naz\u00fdv\u00e1 Clish<\/b>. To je omezen\u00fd re\u017eim, ve kter\u00e9m je k dispozici omezen\u00fd po\u010det p\u0159\u00edkaz\u016f a nastaven\u00ed. Pro \u00fapln\u00fd p\u0159\u00edstup ke v\u0161em p\u0159\u00edkaz\u016fm je nutn\u00e9 vstoupit do Expert<\/b> re\u017eimu. To lze p\u0159irovnat k CLI od Cisco, kde existuje u\u017eivatelsk\u00fd re\u017eim (user mode) a privilegovan\u00fd re\u017eim (privileged mode), pro vstup do kter\u00e9ho je vy\u017eadov\u00e1n p\u0159\u00edkaz enable. V Gaia je pro vstup do expert mode nutn\u00e9 zadat p\u0159\u00edkaz expert.
      \nSamotn\u00e1 syntaxe CLI je docela jednoduch\u00e1: Operace funkce parametr<\/b><\/i>
      \nMezi \u010dty\u0159mi hlavn\u00edmi oper\u00e1tory, kter\u00e9 budete pou\u017e\u00edvat nej\u010dast\u011bji, pat\u0159\u00ed: show, set, add, delete<\/b>. Naj\u00edt dokumentaci k p\u0159\u00edkaz\u016fm CLI je pom\u011brn\u011b snadn\u00e9, sta\u010d\u00ed vyhledat \u201c      Check Point CLI<\/a><\/noindex>\u201d. Existuj\u00ed tak\u00e9 dal\u0161\u00ed soubory u\u017eite\u010dn\u00fdch p\u0159\u00edkaz\u016f, kter\u00e9 budete ur\u010dit\u011b pot\u0159ebovat p\u0159i ka\u017edodenn\u00ed pr\u00e1ci s Checkpointem. Nemus\u00edte si je pamatovat, existuj\u00ed dobr\u00e9 p\u0159\u00edru\u010dky k t\u011bmto p\u0159\u00edkaz\u016fm, krom\u011b toho jsou k dispozici velmi u\u017eite\u010dn\u00e9 tah\u00e1ky. Odkaz na jeden z nich um\u00edst\u00edm pod video. Tak\u00e9 doporu\u010duji v\u011bnovat pozornost dv\u011bma na\u0161im \u010dl\u00e1nk\u016fm:<\/p>\n