Management API VPN Settings

[Simon_Macpherso]

Hello,

When configuring VPN settings via the management API using mgmt_api, the VPN domain and VPN domain type are not being set. 

Using Management APIv1.9

The following example command runs successfully but the VPN domain and VPN domain type are not configured. 

mgmt_cli -r true set simple-cluster name 'cg-cluster-1' application-control true vpn true vpn-settings.vpn-domain 'demo_vpn_domain' vpn-settings.vpn-domain-type manual vpn-settings.link-selection.ip-selection use-statically-nated-ip vpn-settings.link-selection.ip-address '111.111.111.111'

[Expert@demomgmt:0]# mgmt_cli -r true set simple-cluster name 'cg-cluster-1-demo' application-control true vpn true vpn-settings.vpn-domain 'demo_vpn_domain' vpn-settings.vpn-domain-type 'manual' vpn-settings.link-selection.ip-selection use-statically-nated-ip vpn-settings.link-selection.ip-address '111.111.111.111'

---------------------------------------------
Time: [23:59:16] 11/7/2023
---------------------------------------------
"set simple-cluster" succeeded (100%)
tasks:
- task-id: "01234567-89ab-cdef-b5a7-0e16133d34cd"
task-name: "set simple-cluster"
status: "succeeded"
progress-percentage: 100
suppressed: false
task-details:
- message: "Successfully finished"

---------------------------------------------
Time: [23:59:17] 11/7/2023
---------------------------------------------
"Publish operation" succeeded (100%)

The object used for the VPN domain is a network group object.  

[Tal_Paz-Fridman]

I managed to reproduce the issue in my lab.

I will forward it to the relevant R&D owner.

[Simon_Macpherso]

The settings configured in the vpn-settings parameter can be successfully configured when using the add simple-gateway endpoint management APIv1.9. So the issue may be specific to the add simple-gateway and or set simple-gateway endpoints.

[jimmy1]

Yes it works with the simple gateway, but not with the simple cluster.

I need it for both, the gateway and the cluster so please fix that!

[PhoneBoy]

To ensure you receive a fix for this, I recommend a TAC case: https://help.checkpoint.com 

[Simon_Macpherso]

@PhoneBoy A TAC was opened for this a few weeks ago. Its currently sitting with R+D. 

[Tal_Paz-Fridman]

I was told by relevant R&D owner that it will be fixed in a JHF but it is still not known which one.

[Simon_Macpherso]

Thanks

[jimmy1]

I am using the web-API and I have the same issue that the VPN-Domain is not beeing set...

Please fix that!