VTI creation in console

[VENKAT_S_P]

Is there a way to create a point to point interface manually in console instead of using the "Get interface" every time when have VTI (route based VPN) configured from CLI.

[PhoneBoy]

While R80.10 definitely has improved CLI/API support from past versions, there are some functions that are still done with the older OPSEC CPMI.

This includes many functions related to gateway objects, including such functions as "Get Interfaces," which can only be done via SmartConsole.

We plan to resolve those limitations in future versions. 

[VENKAT_S_P]

Understood, Thanks for the reply Dameon.

[Ofir_Shikolski]

I would explorer the option to use these 2 API commands (I yet did not had the opportunity to check it )

1. run-script

use the clish syntax to add VTI:

something like that :

clish -sic "add vpn tunnel 20 type numbered local 10.10.10.1 remote 20.20.20.1 peer MyPeer"

Network Management 

2. set simple-gateway to define the interfaces

Please see this section with the API documentation :

interfaces

List: Object v Parameter name Value Description uid Required string Object unique identifier. or name Required string Object name. anti-spoofing boolean N/A anti-spoofing-settings Object v N/A ip-address string IPv4 or IPv6 address. If both addresses are required use ipv4-address and ipv6-address fields explicitly. or ipv4-address string IPv4 address. or ipv6-address string IPv6 address. network-mask string IPv4 or IPv6 network mask. If both masks are required use ipv4-network-mask and ipv6-network-mask fields explicitly. Instead of providing mask itself it is possible to specify IPv4 or IPv6 mask length in mask-length field. If both masks length are required use ipv4-mask-length and ipv6-mask-length fields explicitly. or ipv4-network-mask string IPv4 network address. or ipv6-network-mask string IPv6 network address. or mask-length string IPv4 or IPv6 network mask length. or ipv4-mask-length string IPv4 network mask length. or ipv6-mask-length string IPv6 network mask length. new-name string New name of the object. security-zone boolean N/A security-zone-settings Object v N/A tags Object Collection of tag identifiers. topology string Valid values: automatic, external, internal N/A topology-settings Object v N/A More v

Network interfaces. When a gateway is updated with a new interfaces, the existing interfaces are removed

[VENKAT_S_P]

I am not talking about the API stuffs. I use unnumbered vti with cluster env. Dameon seems to be right, still we do not have a pt-to-pt from the manual selection.