Author: strelok

CheckPoint – Key and user management using Ansible and new GAiA API

As a big fan of automation and Ansible I was pretty unhappy when I found out the default “user” Ansible module was not able to handle user management in a way that GAiA likes – since the users need to be added to the config, I started looking at ways to either bring the functionality to the “user” module, or create a separate module that could handle this task.

Continue reading

Hypervisor networking using Open vSwitch – Part 1 – Setting up basic vSwitch

Lately I’ve been toying around with the idea of finally putting more effort into learning ins and outs of CheckPoint VSX systems. Basic deployment technically allows us to rely only on physical interfaces to set up the chassis but I wanted to make sure I have something that reflects most common setups (because in 99.9% of cases you will encounter VSXes simply connected to a switch over a trunk port and very little physical cabling).

In this article you will learn how to add a basic virtual switch, as well as to move some of your interfaces to it.

Continue reading