topic Re: DAGPusher - Add device - Is vsys supported? in General Topics

DAGPusher - Add device - Is vsys supported?

andrew.stanton — Wed, 31 May 2017 17:52:23 GMT

In a Dagpusher output, I see the VSYS as a column, but when adding device there is no input field for VSYS.

I checked the code on GitHub for the file at: minemeld-webui/src/app/nodedetail/dagpusher.controller.ts

Seems like maybe the VSYS is not fully implemented as part of add device.

Can anyone confirm whether we can mention VSYS somewhere else for dagpusher device?

lmori — Fri, 02 Jun 2017 12:21:19 GMT

this is supported by the engine but not yet by the WebUI. I will fix this soon.

fest0l — Thu, 31 Aug 2017 06:37:12 GMT

is there something else to be done besides editing the configuration file of the respective DAGPusher node?

e.g. change /opt/minemeld/local/config/[your-dagpusher-name].yml and add a parameter vsys: vsysN to the firewall for which vsys is to be enabled?

show object registered-ip all does not list any entries after switching into the target vsys.

fest0l — Mon, 25 Sep 2017 07:53:08 GMT

i found one more thing to modify in order to enable vsys support (for version 0.9.42):

edit file /opt/minemeld/engine/0.9.42/lib/python2.7/site-packages/minemeld/ft/dag.py

change line 139 from:

self.xapi.user_id(cmd=cmd)

to:

self.xapi.user_id(cmd=cmd, vsys=self.device.get('vsys', None))

restart minemeld engine, enjoy dagpusher with vsys support.

lmori — Fri, 06 Oct 2017 09:18:09 GMT

Thanks @fest0l, you should send us a pull request !

kreeves — Wed, 22 Nov 2017 15:33:29 GMT

I am not sure how to submit a patch to github, but here you go. just pulled from 9.44

lmori — Tue, 26 Dec 2017 07:36:52 GMT

thanks ! I will work on integrating your patch in MIneMeld source code.