topic Re: SMB configure WAN default GW via CLI in Spark Firewall (SMB)

SMB configure WAN default GW via CLI

D_W — Mon, 10 Mar 2025 10:30:42 GMT

Hi Mates,

I cannot find the CLI syntax to define the Default Gateway (of the WAN Port/Internet Connection) for SMB 1500-2000 - R81.10.10.
Is it possible to configure it via CLI?

Cheers,
Dave

Re: SMB configure WAN default GW via CLI

AkosBakos — Mon, 10 Mar 2025 11:17:15 GMT

Hi @D_W

I'm not 100% sure, this setting is available in CLI. MAybe @G_W_Albrecht knows the answer without test GW:-)

To configure a default route:

Go to Device > Local Network page.
Select an interface and click Edit.

The Edit window opens in the Configuration tab.
Click the DHCP Server options tab.
In the Default Gateway section, do one of these:
- Click Use this gateway's IP address as the default gateway.
- Select Use the following IP address and enter an IP address.
Click Apply.

https://sc1.checkpoint.com/documents/SMB_R80.20.20/AdminGuides/Locally_Managed/EN/Topics/Configuring-Routing-Table.htm?Highlight=default%20route

Akos

Re: SMB configure WAN default GW via CLI

G_W_Albrecht — Mon, 10 Mar 2025 13:11:19 GMT

https://sc1.checkpoint.com/documents/SMB_R81.10.X/CLI/EN/Content/Topics/add-internet-connection-interface-WAN.htm?tocpath=Configuring%20the%20Internet%20Connections%7CAdding%20Internet%20Connections%7C_____1

add internet-connection name "<name>" interface WAN type static default-gw <default-gw> ipv4-address <ipv4-address> mask-length <mask-length>

Re: SMB configure WAN default GW via CLI

AkosBakos — Mon, 10 Mar 2025 14:20:07 GMT

Live and learn 🙂

Re: SMB configure WAN default GW via CLI

D_W — Mon, 10 Mar 2025 15:39:15 GMT

Thank you - I will work with this then 🙂

Interestingly I tried to lookup the config from a running 1600 and there is no defined config with "internet-connection".
Everything regarding the WAN config is set like this - and also the default-gw is missing in the config:

set interface-type "WAN" ipv4-address "xx.xx.xx.xx" subnet-mask "255.255.255.240" set interface-alias "Internet1" ipv4-address "xx.xx.xx.xx" mask-length "28" state "on

That's why I'm confused. I exported the config with this:

/pfrm2.0/bin/lua /pfrm2.0/bin/cli/showConfig.lua > /var/log/config.txt

Additonal Info the SMB devices are centrally managed.

Re: SMB configure WAN default GW via CLI

G_W_Albrecht — Mon, 10 Mar 2025 15:53:47 GMT

As it can easily be found in the CLI guide together with examples, this command shuld not be unknown 😉 This is the same command the FTW and WebGUI uses. showConfig is not "correct" as it replaces all first time add commands, also see my post: https://community.checkpoint.com/t5/SMB-Gateways-Spark/Configuration-transfer-between-different-SMB-models/m-p/38898:

These saved CLISH commands usually are not able to replicate the configuration completely, as, for example, configuring an existing interface uses "set internet-connection", as used in "show configuration" output, but to define a new interface from scratch as needed in a new or reset box, you would have to issue "add internet-connection" instead.

Re: SMB configure WAN default GW via CLI

AkosBakos — Mon, 10 Mar 2025 21:55:05 GMT

Yes, but the embedded gaia is always contains surprises for me.