topic Re: Add shared Object in REST API in Automation/API Discussions

Add shared Object in REST API

rays1 — Tue, 17 Jan 2012 15:18:21 GMT

I am running code verion 4.0.7 and am trying to create a new shared address, then add that address to a shared address-group. Since I am not running 4.1, I don't have the API browser and my attempts at guessing the correct path have failed. Any help is appreciated.

Ray

Re: Add shared Object in REST API

SRA — Wed, 18 Jan 2012 01:22:29 GMT

To add an address object to a vsys:

http(s)://firewall/esp/restapi.esp?type=config&action=set&

xpath=/config/devices/entry[@name='localhost.localdomain']/vsys/entry[@name='vsys1']/address&

element=<entry name='test-addr'><ip-netmask>2.2.2.2/32</ip-netmask></entry>

To add the address object to a address group:

http(s)://firewall/esp/restapi.esp?type=config&action=set&

xpath=/config/devices/entry[@name='localhost.localdomain']/vsys/entry[@name='vsys1']/address-group/entry[@name='test-addr-grp']&

element=<member>test-addr</member>

Re: Add shared Object in REST API

rays1 — Wed, 18 Jan 2012 14:53:15 GMT

Actually I was looking to add an address as shared, so that it could be used in every vsys. Turns out to add an object as shared you use

xpath=/config/shared/

I am now able to add a shared address and then add that address to a shared group. Does anyone know how to remove an address from a group? Using action=delete tries to delete the entire group even though I am specifying a member in that group to delete.

Finally, if anyone knows how to perform a commit lock on either the whole system or just 1 vsys it would also be handy.

Ray

Re: Add shared Object in REST API

ksteves1 — Wed, 18 Jan 2012 19:08:57 GMT

A nice way to determine XPath and XML needed when using the API is in operational mode do 'debug cli on' then in configuration mode execute the set/delete/show/etc command you want to duplicate and observe the debug output. In your case you'll find you need something like: /config/shared/address-group/entry[@name='g1']/member[text()='host1'] to delete multiple group members you can do: /config/shared/address-group/entry[@name='g1']/member[text()='host1' or text()='host2']

Re: Add shared Object in REST API

rays1 — Wed, 18 Jan 2012 20:22:37 GMT

Thats great news! Using the cli debug I was able to determine the correct syntax to do almost everything I needed to do. Had I known that before, a great deal of time could have been saved. Thank you very much for your help.

Ray