Configure Internet-Connection via SmartProvisioning Script

[morris]

Hi there,

we need to configure the DMZ-Port as Internet-Connection with a static IP-Address.

I configured a static IP-Address via WebGUI. Internet-connection "Internet2" is configured with 192.168.1.1, but "show configuration" does not show this IP-Address.

set internet-connection "Internet2" type "pppoa" local-ipv4-address "auto" method "auto" idle-time "20"
set internet-connection "Internet2" auto-negotiation "on" link-speed "10/half" mtu "1500" mac-addr "default" vpi "0" vci "0" standard "adsl2+" encapsulation "llc"
set internet-connection "Internet2" type "cellular"
set internet-connection "Internet2" "probe-icmp-servers" first "8.8.8.8" second "8.8.4.4"
set internet-connection "Internet2" type "pppoa"
set internet-connection "Internet2" ha-priority "1" load-balancing-weight "10"
set internet-connection "Internet2" qos-upload "disable"
set internet-connection "Internet2" qos-download "disable"
set internet-connection "Internet2" connect-on-demand "false"
set internet-connection "Internet2" disable-nat "off"
set internet-connection "Internet2" "enable"

At this point I don't see a possibility to configure the DMZ-Port as Internet-Connection via CLI.

On the other hand I can configure the following:

set interface "DMZ" ipv4-address "192.168.1.1" mask-length "24"
set interface "DMZ" description "Uplink"
set interface "DMZ" state "on"

But that only changes the settings in the local network.

Is there a way to implemented an internet-connection via CLI?

Thank you,

Maurice

[PhoneBoy · Accepted solution]

To establish the secondary Internet connection over the CLI, you need to use the add internet-connection command.

When you use that command, you can specify the interface for the secondary interface (e.g. DMZ). 

There are some examples here: Check Point Zero-Touch User Guide 

[morris]

Hi Dameon,

thank you for your answer. That did work!

But I still asking myself, why the configured IP-Address won't show with "show configuration". Only in the WebGUI you can see the configured IP-Address in the "Internet-Connection".

[PhoneBoy]

I assume it's a limitation of "show configuration".

It might be worth a ticket with the TAC to confirm.

[morris]

There is a "workaround":

Using "show internet-connection Internet1" instead of "show configuration" gets all information for one specific internet-connection.

[PhoneBoy]

Thanks for sharing.