{"id":30752,"date":"2019-10-31T21:37:15","date_gmt":"2019-10-31T18:37:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/5-check-point-getting-started-r80-20-gaia-cli\/"},"modified":"2019-10-31T21:37:15","modified_gmt":"2019-10-31T18:37:15","slug":"5-check-point-getting-started-r80-20-gaia-cli","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/5-check-point-getting-started-r80-20-gaia-cli","title":{"rendered":"5. Check Point Ies\u0101k\u0161ana R80.20. Gaia & CLI","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"5.
\n
\nLaipni l\u016bdzam 5. nodarb\u012bb\u0101! P\u0113d\u0113joreiz m\u0113s pabeidz\u0101m mened\u017ementa servera instal\u0101ciju un inicializ\u0101ciju, k\u0101 ar\u012b v\u0101rtiem. T\u0101p\u0113c \u0161odien m\u0113s nedaudz \"pav\u0113ro\u0161u\" to iek\u0161\u0113j\u0101s lietas, proti, Gaia oper\u0113t\u0101jsist\u0113mas iestat\u012bjumus. Gaia iestat\u012bjumus var iedal\u012bt div\u0101s liel\u0101s kategorij\u0101s:<\/p>\n

    \n
  1. Sist\u0113mas iestat\u012bjumi<\/b> (IP adreses, mar\u0161rut\u0113\u0161ana, NTP, DNS, DHCP, SNMP, dubl\u0113jumi, sist\u0113mas atjaunin\u0101jumi utt.). \u0160os parametrus var konfigur\u0113t, izmantojot WebUI vai CLI;<\/li>\n
  2. Dro\u0161\u012bbas iestat\u012bjumi<\/b> (Viss, kas attiecas uz piek\u013cuves sarakstiem, IPS, pretv\u012brusu, pretspamu, pretbotu, lietojumprogrammu kontroli utt. T.i., visa dro\u0161\u012bbas funkcionalit\u0101te). Tam tiek izmantota SmartConsole vai API.<\/li>\n<\/ol>\n

    \n\u0160aj\u0101 nodarb\u012bb\u0101 m\u0113s apspried\u012bsim pirmo punktu, t.i., Sist\u0113mas iestat\u012bjumus.<\/a><\/noindex>
    \nK\u0101 jau teicu, \u0161os iestat\u012bjumus var labot vai nu caur t\u012bmek\u013ca saskarni, vai caur komandrindu. S\u0101ksim ar t\u012bmek\u013ca saskarni.<\/p>\n

    Gaia Port\u0101ls<\/h3>\n

    \nTas tiek saukts par Gaia port\u0101lu, k\u0101 to izsaka Check Point. Piek\u013cuve tam var tikt ieg\u016bta, izmantojot p\u0101rl\u016bkprogrammu, \"pieklauv\u0113jot\" pa https uz ier\u012bces IP adresi. Taj\u0101 tiek atbalst\u012btas p\u0101rl\u016bkprogrammas Chrome, Firefox, Safari un IE. Pat Edge darbojas, lai gan tas nav ofici\u0101li atbalst\u012bto sarakst\u0101. Port\u0101ls izskat\u0101s \u0161\u0101di:<\/p>\n

    \"5.
    \n
    \nVair\u0101k detaliz\u0113ta inform\u0101cija par port\u0101lu, k\u0101 ar\u012b par interfeisu un noklus\u0113juma mar\u0161ruta konfigur\u0101ciju b\u016bs atrodama zem\u0101k redzamaj\u0101 video nodarb\u012bb\u0101.
    \nTagad apl\u016bkosim komandrindu.<\/p>\n

    Check Point CLI<\/h3>\n

    \nV\u0113l joproj\u0101m past\u0101v uzskats, ka Check Point nevar p\u0101rvald\u012bt no komandrindas. Tas t\u0101 nav. Praktiski visi sist\u0113mas iestat\u012bjumi var tikt main\u012bti CLI (paties\u012bb\u0101 dro\u0161\u012bbas iestat\u012bjumus var main\u012bt, izmantojot Check Point API). Ir vair\u0101ki veidi, k\u0101 iek\u013c\u016bt CLI:<\/p>\n

      \n
    1. Piesl\u0113gties ier\u012bcei caur konsoles portu.<\/li>\n
    2. Piesl\u0113gties pa SSH (Putty, SecureCRT utt.).<\/li>\n
    3. P\u0101rsl\u0113gties uz CLI no SmartConsole.<\/li>\n
    4. Vai no t\u012bmek\u013ca saskarnes, nospie\u017eot ikonu \"Atv\u0113rt termin\u0101li\" aug\u0161\u0113j\u0101 panel\u012b.<\/li>\n<\/ol>\n

      \nSimbols ><\/b> nor\u0101da, ka esat noklus\u0113to Shell re\u017e\u012bm\u0101, kas tiek saukts par Clish<\/b>. Tas ir ierobe\u017eots re\u017e\u012bms, kur\u0101 ir pieejams ierobe\u017eots komandu un iestat\u012bjumu skaits. Pilnam piek\u013cuvei vis\u0101m komand\u0101m ir nepiecie\u0161ams ievad\u012bt Expert<\/b> re\u017e\u012bmu. To var sal\u012bdzin\u0101t ar Cisco CLI, kur\u0101 ir lietot\u0101ja re\u017e\u012bms (user mode) un privile\u0123\u0113ts re\u017e\u012bms (privileged mode), lai iek\u013c\u016btu kur\u0101 ir nepiecie\u0161ama komanda enable. Gaia, lai iek\u013c\u016btu expert mode, ir j\u0101ievada komanda expert.
      \nPa\u0161s CLI sintakse ir diezgan vienk\u0101r\u0161a: Oper\u0101cijas funkcija parametrs<\/b><\/i>
      \nTa\u010du \u010detras galven\u0101s komandas, kuras j\u016bs izmantojat visbie\u017e\u0101k: show, set, add, delete<\/b>. Dokument\u0101ciju par CLI komand\u0101m ir viegli atrast, uzrakstot \u201c      Check Point CLI<\/a><\/noindex>\u201d. Ir ar\u012b da\u017eas citas noder\u012bgas komandu grupas, kas jums noteikti noder\u0113s ikdienas darb\u0101 ar Check Point. Nav nepiecie\u0161ams t\u0101s iegaum\u0113t, ir labi rokasgr\u0101matas par \u0161\u012bm komand\u0101m, turkl\u0101t ir \u013coti noder\u012bgas piez\u012bmes. Saiti uz vienu no t\u0101m es ievieto\u0161u zem video. Iesaku piev\u0113rst uzman\u012bbu ar\u012b div\u0101m m\u016bsu rakstiem:<\/p>\n