topic Re: Get interfaces WITH/WITHOUT topology in General Topics

Get interfaces WITH/WITHOUT topology

speedbot33 — Fri, 10 Oct 2025 14:20:47 GMT

New post here coming from an older post

community.checkpoint.com/t5/Security-Gateways/Get-Interfaces-with-topology/m-p/259649#M50924

Here's a curious behavior and what would be the best practice regarding the dreaded "get interfaces WITH topology".

Of course, this is using as a reference the well redacted sk183590.

What happens when you have interfaces that they update their topology automatically(based on routing) and after configuring static- routes, the networks aren't added into the network group object under the interface as they're supposed to?

As to my issue that happened several days ago, to make matters worse, the network group object was nowhere to be found in SmartConsole browser object(yes, I did check for specific filters) and no joy. However, the object does exists thru mgmt_cli! Even AI Copilot said so! lol.

So, apparently using the WITHOUT option was NOT the correct way and since I'm not particularly fond of the WITH option in a production environment, which probably could've solved the problem, I ended up adding them manually with mgmt_cli API. It was kinda fun the workaround, but got me thinking, was it a normal behavior? What are we supposed to do in these circumstances?

Re: Get interfaces WITH/WITHOUT topology

Bob_Zimmerman — Fri, 10 Oct 2025 14:48:37 GMT

I'm a bit confused. Are you using the Override > This Network (Internal) > "Network defined by routes" option on the interface? If so, there is no network group object representing the networks out that interface unless you manually make one. And if you manually make such a group, you have to manually maintain it.

Re: Get interfaces WITH/WITHOUT topology

speedbot33 — Fri, 10 Oct 2025 15:32:11 GMT

These interfaces were done by a previous admin and SmartConsole IMO is not consistent when it comes to these topology options. For instance:

The interfaces in question(done by prev admin) show as Internal but not overridden, and they do have a topology object which automatically created the "Net_" objects.(these objects nor the Network Group itself do not appear in searches done thru the Object Explorer in SmartConsole as stated in OP but do appear in searches thru the mgmt_cli)

Interfaces configured by me, I've explicitly used defined by routes, defined by the intf and netM, etc...

I believe the interfaces in question where created using the Not defined (Internal) option. My question would be, if this option is the one that also creates automatically a topology based on routes?

Re: Get interfaces WITH/WITHOUT topology

the_rock — Fri, 10 Oct 2025 15:43:53 GMT

Its the one that says "defined by routes"

If topology changes, its auto updated, no need to change anything.

Andy

Re: Get interfaces WITH/WITHOUT topology

the_rock — Wed, 15 Oct 2025 08:47:35 GMT

Hey @speedbot33

Were you able to figure this out?

Best,

Andy