topic Re: Management API VPN Settings in API / CLI Discussion

Management API VPN Settings

Simon_Macpherso — Wed, 12 Jul 2023 02:31:15 GMT

Hello,

When configuring VPN settings via the management API using mgmt_api, the VPN domain and VPN domain type are not being set.

Using Management APIv1.9

The following example command runs successfully but the VPN domain and VPN domain type are not configured.

mgmt_cli -r true set simple-cluster name 'cg-cluster-1' application-control true vpn true vpn-settings.vpn-domain 'demo_vpn_domain' vpn-settings.vpn-domain-type manual vpn-settings.link-selection.ip-selection use-statically-nated-ip vpn-settings.link-selection.ip-address '111.111.111.111'

[Expert@demomgmt:0]# mgmt_cli -r true set simple-cluster name 'cg-cluster-1-demo' application-control true vpn true vpn-settings.vpn-domain 'demo_vpn_domain' vpn-settings.vpn-domain-type 'manual' vpn-settings.link-selection.ip-selection use-statically-nated-ip vpn-settings.link-selection.ip-address '111.111.111.111'

---------------------------------------------
Time: [23:59:16] 11/7/2023
---------------------------------------------
"set simple-cluster" succeeded (100%)
tasks:
- task-id: "01234567-89ab-cdef-b5a7-0e16133d34cd"
task-name: "set simple-cluster"
status: "succeeded"
progress-percentage: 100
suppressed: false
task-details:
- message: "Successfully finished"

---------------------------------------------
Time: [23:59:17] 11/7/2023
---------------------------------------------
"Publish operation" succeeded (100%)

The object used for the VPN domain is a network group object.

Re: Management API VPN Settings

Tal_Paz-Fridman — Wed, 12 Jul 2023 11:06:11 GMT

I managed to reproduce the issue in my lab.

I will forward it to the relevant R&D owner.

Re: Management API VPN Settings

jimmy1 — Tue, 25 Jul 2023 12:35:10 GMT

I am using the web-API and I have the same issue that the VPN-Domain is not beeing set...

Please fix that!

Re: Management API VPN Settings

Simon_Macpherso — Tue, 25 Jul 2023 22:57:01 GMT

The settings configured in the vpn-settings parameter can be successfully configured when using the add simple-gateway endpoint management APIv1.9. So the issue may be specific to the add simple-gateway and or set simple-gateway endpoints.

Re: Management API VPN Settings

jimmy1 — Wed, 26 Jul 2023 06:48:52 GMT

Yes it works with the simple gateway, but not with the simple cluster.

I need it for both, the gateway and the cluster so please fix that!

Re: Management API VPN Settings

PhoneBoy — Wed, 26 Jul 2023 13:32:52 GMT

To ensure you receive a fix for this, I recommend a TAC case: https://help.checkpoint.com

Re: Management API VPN Settings

Simon_Macpherso — Mon, 31 Jul 2023 04:35:44 GMT

@PhoneBoy A TAC was opened for this a few weeks ago. Its currently sitting with R+D.

Re: Management API VPN Settings

Tal_Paz-Fridman — Mon, 31 Jul 2023 11:37:40 GMT

I was told by relevant R&D owner that it will be fixed in a JHF but it is still not known which one.

Re: Management API VPN Settings

Simon_Macpherso — Mon, 31 Jul 2023 23:45:29 GMT

Thanks