Remote-Access Site also shows Gateway selection when 2nd smartconsole gateway has enabled remote acc

[skandshus]

Hello everyone.
I have been struggling with an issue for some while. now the time is getting close to me needing an actual solution

WHen i open the remote access software, i can connect to my "site"that i have added..Photo attached..

it has a site selection in case i wish to connect to another vpn site.

BUT.

the issue comes, if i enable remote access on a 2nd gateway managed in my smartconsole. then a dropdown menu will be added that also prompts me to select gateway.. why is that? and how do i disable that?

i do not wish to have to select gateway.. i was to be select the site that i need and not focus on also selecting a gateway..

this WILL cause confusion and problems down the road once i enable this for my customers.

I have been trying to google the issue and search in user center, but it doesnt seem like i can find any explanation on this

I have also looked in the remote access guide to no avail.

ps. The gateway has different public adresses. different encryption domain... its used by 2 different customers

[Gary_Scott]

This is expected, any gateways managed by the same manager and part of the RA community will be presented when creating a site to any gateway in the RA community. To keep the drop down from showing for any additional gateways you can follow sk78180.

[skandshus]

i seems it "happens" because they share the same VPN domain=the same remote subnet? is that correct?

i am using different subnets... so shouldnt that be a different case then??

the "new" gateway that i am enabling remote access on is a VSX.. so i have no ssh/gaia ui option 😞

[Gary_Scott]

No, any gateways that are managed by the same manager and in the RA community will be presented when creating a site to any of the gateways, this is by design and expected, a site is also a gateway, not all gateways are sites. Follow sk78180 and you will not get the drop down for any additional gateways. Do note any changes to the .ttm file requires the site to be deleted and recreated for those changes to take affect.

[skandshus]

Thank you.

I will follow it.

But how do i workaround the fact that there is no SSH option on the VSX Gateway? (its added in firewall) but apparantly a VSX gateway is virtual and doesnt have SSH options

[Gary_Scott]

You ssh to the VSX gateway then go into the VS environment, vsenv X

[G_W_Albrecht]

See VSX R81.10 Administration Guide p.90: 

1. Connect to the command line on the VSX Gateway (each VSX Cluster Member).

2. Log in to Gaia Clish.

3. Enable ("per-vs") or disable ("default") the feature:

   Note - You can run this command in the context of any Virtual Device.

4. set dns mode {per-vs | default}
   

[skandshus]

Did you mean page90?

I see something else there.
https://dl3.checkpoint.com/paid/1e/1e1528553da29e40b19b7ad0555c8dac/CP_R81.10_Quantum_ScalablePlatfo...