topic Re: command cli show arp and export result in General Topics

command cli show arp and export result

axelfa — Thu, 23 Apr 2020 17:20:25 GMT

show command, copy the result and export to my computer in ssh

Re: command cli show arp and export result

OtakarKlier — Thu, 23 Apr 2020 21:12:12 GMT

Hello,

If using SSH, then just highlight the stuff you want to copy and then paste it into notepad or something else.

Regards,

Re: command cli show arp and export result

axelfa — Fri, 24 Apr 2020 04:12:35 GMT

Thank you for you help but i don't want to do manualy

it's possible for the exemple ( scp export configuration from MyBackup.xml to user@<scphost>:/path) so whay not for show arp ..

Re: command cli show arp and export result

axelfa — Fri, 24 Apr 2020 08:38:58 GMT

perhaps it's possible to do show arp and >into a file and export the file ?

Re: command cli show arp and export result

SutareMayur — Fri, 24 Apr 2020 11:15:23 GMT

@axelfa,

You can try to export it using API.

API URL would be,

/api/?type=op&cmd=<show><arp><entry name = 'all'/></arp></show>

Mayur

Re: command cli show arp and export result

axelfa — Fri, 24 Apr 2020 14:01:10 GMT

thank you

i 'm beginner

can you help me for a sample example:

i m testing: https://myfirewall/api/?type=op&command=<show><arp><entry name='all'/></arp></show>

message:

<response status="error" code="403">
<result>
<msg>Invalid Credential</msg>
</result>
</response>

Re: command cli show arp and export result

SutareMayur — Fri, 24 Apr 2020 15:20:21 GMT

@axelfa,

First you need to generate API key for your firewall and then you can use it under following path to execute required tasks. For generating api-key, try below path from system's browser from where your firewall is reachable. Here put login credentials which has proper access related to XML/REST API on firewall.

https://<firewall-ip>/api/?type=keygen&user=<username>&password=<password>

Once you have API-KEY for your firewall, use it under below path and shoot it. You should get ARP list in xml format.

https://192.168.1.1/api/?type=op&cmd=<show><arp><entry+name+%3D+%27all%27%2F><%2Farp><%2Fshow>&key=<api-key>

Now if you want to export it in xml file on your system then try below through command prompt. For this, you need to install CURL. Once curl is install, try below from command prompt.

curl -kG "https://192.168.1.1/api/?type=op&cmd=%3Cshow%3E%3Carp%3E%3Centry+name+%3D+%27all%27%2F%3E%3C%2Farp%3E%3C%2Fshow%3E&key=<api-key>" > arp-list.xml

I tried above in my lab and i am getting xml file created with name arp-list.xml.

If you need any reference guide for generating API key, installing CURL etc, please refer below KB article.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm7yCAC

Hope it helps!

Mayur

Re: command cli show arp and export result

Vikashh — Sat, 25 Apr 2020 07:28:15 GMT

Looks good, I will also try this in my environment. Just confirm if it creates any extra resource utilization due to these API calls.

Re: command cli show arp and export result

SutareMayur — Sat, 25 Apr 2020 08:39:51 GMT

@Vikashh, It shouldn't create any negative impact on the firewall.

Mayur

Re: command cli show arp and export result

axelfa — Sat, 25 Apr 2020 11:03:25 GMT

Hello
I'm access a web acces Firewall

and /api:

XML API
Commit
Configuration Commands
Export
Import
Logs
Operational Commands
Reports
User ID

it's similar to access : https://<firewall-ip>/api/?type=keygen&user=<username>&password=<password>

OR NOT ?

Re: command cli show arp and export result

SutareMayur — Sat, 25 Apr 2020 11:31:01 GMT

@axelfa,

https://<firewall-ip>/api/?type=keygen&user=<username>&password=<password>

Above path is for generating API-Key which will be used for further paths under <api-key> fileld.

Mayur

Re: command cli show arp and export result

axelfa — Sat, 25 Apr 2020 14:50:50 GMT

thank you

and logout Api ?

Re: command cli show arp and export result

axelfa — Sun, 26 Apr 2020 16:30:42 GMT

Hello

it's ok for api authentification

but i did not understand

i execute this two lignes ?

https://192.168.1.1/api/?type=op&cmd=<show><arp><entry+name+%3D+%27all%27%2F><%2Farp><%2Fshow>&key=<...

"key" my key ??? " UTFGRIKesytu ....."

curl -kG "https://192.168.1.1/api/?type=op&cmd=%3Cshow%3E%3Carp%3E%3Centry+name+%3D+%27all%27%2F%3E%3C%2Farp%3...>" > arp-list.xml

and the writing characters as wrong (copy past)

thank you

Re: command cli show arp and export result

axelfa — Sun, 26 Apr 2020 18:37:56 GMT

excuse me it's ok

thank you very mutch

Re: command cli show arp and export result

SutareMayur — Mon, 27 Apr 2020 05:38:03 GMT

@axelfa,

Apologies, i was not able to respond.

Were you able to execute path and export file?

Mayur

Re: command cli show arp and export result

axelfa — Mon, 27 Apr 2020 08:40:03 GMT

no problem

it's ok for acces to see the xml page

i would test the export

thank you

Re: command cli show arp and export result

axelfa — Mon, 27 Apr 2020 19:51:59 GMT

but i did not find to replace entry name = 'all'/ by ip=192.168.0.1/24 ?

Re: command cli show arp and export result

SutareMayur — Tue, 28 Apr 2020 05:37:43 GMT

Hi@axelfa ,

As you're looking for exporting arp list, just put IP address of your firewall and a associated API key in below path, the file will get exported through curl. In the post, may be you're not able to see full path, just copy below path and paste it in notepad. So you'll get more clarity.

Just make sure IP address and API key is correct.

curl -kG "https://192.168.1.1/api/?type=op&cmd=%3Cshow%3E%3Carp%3E%3Centry+name+%3D+%27all%27%2F%3E%3C%2Farp%3E%3C%2Fshow%3E&key=<api-key>" > arp-list.xml

Hope it works!

Mayur