dbedit——应对大型网络环境的好工具

bbl164

dbedit
功能说明：后台命令行模式创建/修改/重命名/删除所有对象（包括主机，网络，组等）
重点是，支持批处理文件，进行批量生成对象，可用于对象数目很大的网络环境中使用

进入expert模式使用此命令

bbl164

bbl164

This procedure will create a script file to add Network objects and Network Group objects to the objects_5_0.C file.

This is ideal for environments that are not able to take advantage of GuiDBedit, or where creating a large number of objects at one time is required.
On the SmartCenter Server, close all GUI sessions, including SmartView Tracker, SmartUpdate, etc.
Create a text file containing the following lines:

create network internal_net
modify network_objects internal_net ipaddr 192.168.1.0
modify network_objects internal_net netmask 255.255.255.0
update network_objects internal_net
create host_plain web_server
modify network_objects web_server ipaddr 192.168.1.1
update network_objects web_server
create network_object_group net_group
addelement network_objects net_group '' network_objects:internal_net
addelement network_objects net_group '' network_objects:web_server
update network_objects net_group Save the edited file as: network_script.txt

Below is an explanation of what each section in the network_script.txt file does.

The following section creates a network object called "internal_net" with IP address 192.168.1.0/24:

create network internal_net
modify network_objects internal_net ipaddr 192.168.1.0
modify network_objects internal_net netmask 255.255.255.0
update network_objects internal_net

The following section creates a host object called "web_server" with IP address 192.168.1.1:

create host_plain web_server
modify network_objects web_server ipaddr 192.168.1.1
update network_objects web_server

The following section creates a network object group called "network_object_group" and adds the network object "internal_net" and host object "web_server" to this group object:

create network_object_group net_group
addelement network_objects net_group '' network_objects:internal_net
addelement network_objects net_group '' network_objects:web_server
update network_objects net_group Open a command prompt and change the current directory to the directory, in which the network_script.txt file is located.
Issue the following command to make dbedit run the script.

Note: In the following example the IP address of the SmartCenter Server is 192.168.2.100, the FireWall-1 Administrator name is "fwadmin", and the FireWall-1 Administrator password is "abc123"):

dbed

bbl164

使用此命令之前，关闭所有的GUI界面，包括SmartView Tracker，SmartUpdate等建立一个包含以下内容的文本文件create network internal_net  //创建一个网络对象名为internal_net
modify network_objects internal_net ipaddr 192.168.1.0  //修改网络对象internal_net 的网络为192.168.1.0
modify network_objects internal_net netmask 255.255.255.0  //修改网络象internal_net 的子网掩码为 255.255.255.0
update netwrk_objects internal_net  //更新网络对象internal_net，使之升效create host_plain web_server  //创建一个名为host_plain的主机对象
modify network_objects web_server ipaddr 192.168.1.1  //修改对象web_server的IP地址为192.168.1.1
update network_objects web_server  //更新对象web_server，使之生效create network_object_group net_group  //创建一个名为net_group的网络组
addelement network_objects net_group '' network_objects:internal_net  //将网络对象internal_net加入网络组net_group中
addelement network_objects net_group '' network_objects:web_server  //将对象web_server加入网络组net_group中
update network_objects net_group  //更新网络组net_group，使之生效将该文件保存为名为network_script.txt的文本文件将其上传至CP中的某个目录(/usr/script)
进入该目录，运行命令生成各网络对象
dbedit -local -u admin -p xinboway -f network_script.txt-local 指本机服务器
-s 192.168.1.1 指向IP为192.168.1.1的服务器
-u 管理员名称
-p 密码
-f 脚本文件名

network

bbl164

对象很多的话，用dashboard添加效率很低的

adity

确实是个好东东啊  CP不像其他完成可以使用CLI的设备，在添加大量的规则的时候这个特别有用啊。。