Appliance 1900 doesn't recognise local encryption domain

[Exonix]

Hello,

we have centally managed Appliance 1900 with RAS VPN configured. The SMB has been added to a cluster consisting of a single node.

I can connect, but in the routing table I see all my networks and interfaces instead of the manually specified encryption domain. Why doesn't the security gateway see the local domain?

Thank you!

[the_rock]

Did this ever work? Does deleting/re-creating the site do anything?

Andy

[Exonix]

This is a new setup, but we have another Appliance, that is not a member of the cluster and not managed centralized - it works there.

The recreation of the site didn't help. The strange thing is, that CLI shows "enc-dom auto" 🤷🏼‍

[the_rock]

I dont really work much with SMB appliances, but see in smart console, when you edit the object, is there anything like on regular gaia appliances under network -> vpn domain? If so, you can check to make sure same group is configured for remote access vpn domain.

Andy

[Exonix]

VPN Domain is for SiteToSite VPN. This works. I will open a ticket...

[Exonix]

I was given this article, but it didn't help and I'm not sure this is my case at all: what is the difference between "all the gateways" and "connected gateway"?

Cause

Endpoint client downloads the encryption domain of all the gateways in the Remote Access community including the gateway's topology.

Currently there is no option to configure the client to download the topology of the connected gateway only.

[the_rock]

Does not sound to me like your case either.

Andy