topic Re: Create l3 firewall Rules? in Network Platform API

Create l3 firewall Rules?

nalbacas — Wed, 01 Mar 2023 01:16:16 GMT

Is there a way to create L3 firewall rules using API?

I am trying to migrate one Checkpoint FW to a Meraki MX, and I have a CSV file with the firewall rules.

The documentation only shows GET and Update firewall rules

Any idea?

Re: Create l3 firewall Rules?

aleabrahao — Wed, 01 Mar 2023 01:39:55 GMT

The only way is to do a GET to a file, edit it by adding the new rule and then perform the PUT, that is, there is no other way.

Re: Create l3 firewall Rules?

ByronZ — Wed, 01 Mar 2023 03:26:16 GMT

You will have to convert the existing firewall rule from your csv into json format and use the API's update PUT operation to apply the firewall rules. If you are not sure what fields are needed in the json file, you can find one by doing a GET to retrieve it from the MX.

Re: Create l3 firewall Rules?

frankvdveen — Wed, 01 Mar 2023 13:31:47 GMT

Hi as mentioned get the current rules, add your own and update:

In python that will be something like this:
l3Settings = dashboard.appliance.getNetworkApplianceFirewallL3FirewallRules(<network_id>)
# print (l3Settings['rules']) <-- add your rules

# Update:
response = dashboard.appliance.updateNetworkApplianceFirewallL3FirewallRules(<network_id>, rules=l3Settings['rules'])

Re: Create l3 firewall Rules?

sungod — Wed, 01 Mar 2023 13:53:24 GMT

There's an example script that may help you (it uses the Meraki Python library)...

https://developer.cisco.com/codeexchange/github/repo/CiscoSE/AddMerakiMXL3FirewallRuleToNetworks#usecase

https://github.com/CiscoSE/AddMerakiMXL3FirewallRuleToNetworks