Closed fgazelot closed 10 months ago
fgazelot
commented
10 months ago Hello,
I can't reproduce the issue in my dev SMC.. I thought it was linked to DHCP, but I can't find the issue on another engine with DHCP setup on the same SMC or dev SMC.
Do you have any idea why we can't find "interface_id" in an other case ?
Kind regards, FGazelot
gregory83
commented
10 months ago Hello,
I've been trying to reproduce the issue without success. I would need more details about the endpoints of this engine giving the error.
BR, /Greg.
fgazelot
commented
10 months ago Hello,
Thanks you for taking time for my issue. Finaly, i find this issue only with one Engine ..
I don't know how to give you more than :
In [6]: for endpoint in vpn_endpoint:
...: print(endpoint.data.data)
...:
{'address': '10.157.24.1', 'connection_type_ref': 'http://X.X.X.X:8082/6.10/elements/connection_type/1', 'deducted_name': '10.157.24.1', 'dynamic': False, 'enabled': False, 'force_nat_t': False, 'ike_phase1_id_type': 3, 'ipsec_vpn': True, 'key': 268443370, 'link': [{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway/268437240/internal_endpoint/268443370', 'rel': 'self', 'type': 'internal_endpoint'}, {'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway/268437240/internal_endpoint/268443370/history', 'rel': 'history'}, {'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway/268437240/internal_endpoint/268443370/lock', 'rel': 'lock'}], 'locked': False, 'nat_t': True, 'physical_interface': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/physical_interface/268444809', 'read_only': False, 'ssl_vpn_portal': True, 'ssl_vpn_tunnel': True, 'system': False, 'system_key': -1, 'trashed': False, 'udp_encapsulation': False}
{'address': '172.16.2.30', 'connection_type_ref': 'http://X.X.X.X:8082/6.10/elements/connection_type/1', 'deducted_name': '172.16.2.30', 'dynamic': False, 'enabled': False, 'force_nat_t': False, 'ike_phase1_id_type': 3, 'ipsec_vpn': True, 'key': 268443371, 'link': [{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway/268437240/internal_endpoint/268443371', 'rel': 'self', 'type': 'internal_endpoint'}, {'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway/268437240/internal_endpoint/268443371/history', 'rel': 'history'}, {'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway/268437240/internal_endpoint/268443371/lock', 'rel': 'lock'}], 'locked': False, 'nat_t': True, 'physical_interface': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/vpn_broker_interface/268444811', 'read_only': False, 'ssl_vpn_portal': True, 'ssl_vpn_tunnel': True, 'system': False, 'system_key': -1, 'trashed': False, 'udp_encapsulation': False}
{'connection_type_ref': 'http://X.X.X.X:8082/6.10/elements/connection_type/268435467', 'deducted_name': 'First DHCP Interface ip', 'dynamic': True, 'enabled': True, 'force_nat_t': False, 'ike_phase1_id_type': 1, 'ike_phase1_id_value': 'ENGINE01.269074987@stonegate.com', 'ipsec_vpn': True, 'key': 268443372, 'link': [{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway/268437240/internal_endpoint/268443372', 'rel': 'self', 'type': 'internal_endpoint'}, {'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway/268437240/internal_endpoint/268443372/history', 'rel': 'history'}, {'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway/268437240/internal_endpoint/268443372/lock', 'rel': 'lock'}], 'locked': False, 'nat_t': True, 'read_only': False, 'ssl_vpn_portal': False, 'ssl_vpn_tunnel': False, 'system': False, 'system_key': -1, 'trashed': False, 'udp_encapsulation': False}In [8]: vpn_endpoint[2]
Out[8]: InternalEndpoint(name=First DHCP Interface ip)
In [9]:
In [9]: issue_endpoint = vpn_endpoint[2]
In [10]: issue_endpoint.interface_id
---------------------------------------------------------------------------
ValueError Traceback (most recent call last)
<ipython-input-10-a959dd5c40e5> in <module>
----> 1 issue_endpoint.interface_id
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/core/engine.py in interface_id(self)
2164 :return: str interface id
2165 """
-> 2166 return self.physical_interface.interface_id
2167
2168 @property
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/core/interfaces.py in interface_id(self)
706 :rtype: str
707 """
--> 708 return self.data.get("interface_id")
709
710 @interface_id.setter
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/decorators.py in __get__(self, obj, cls)
95 if obj is None:
96 return self
---> 97 value = obj.__dict__[self.func.__name__] = self.func(obj)
98 return value
99
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/model.py in data(self)
384 @cached_property
385 def data(self):
--> 386 return LoadElement(self.href)
387
388 @property
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/model.py in LoadElement(href, only_etag)
113 if only_etag:
114 return result.etag
--> 115 return ElementCache(result.json, etag=result.etag)
116
117
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/model.py in __init__(self, data, **kw)
170 def __init__(self, data=None, **kw):
171 self._etag = kw.pop("etag", None)
--> 172 super(ElementCache, self).__init__(data=data if data else {})
173
174 def etag(self, href):
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/structs.py in __init__(self, data, **kwargs)
156 def __init__(self, data=None, **kwargs):
157 self.data = data if data else {}
--> 158 self.update(self.data, **kwargs)
159
160 def __setitem__(self, key, value):
~/.pyenv/versions/3.6.15/lib/python3.6/_collections_abc.py in update(*args, **kwds)
844 self[key] = other[key]
845 else:
--> 846 for key, value in other:
847 self[key] = value
848 for key, value in kwds.items():
ValueError: too many values to unpack (expected 2)In [11]: issue_endpoint.physical_interface
Out[11]: ---------------------------------------------------------------------------
ValueError Traceback (most recent call last)
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/IPython/core/formatters.py in __call__(self, obj)
700 type_pprinters=self.type_printers,
701 deferred_pprinters=self.deferred_printers)
--> 702 printer.pretty(obj)
703 printer.flush()
704 return stream.getvalue()
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/IPython/lib/pretty.py in pretty(self, obj)
392 if cls is not object \
393 and callable(cls.__dict__.get('__repr__')):
--> 394 return _repr_pprint(obj, self, cycle)
395
396 return _default_pprint(obj, self, cycle)
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/IPython/lib/pretty.py in _repr_pprint(obj, p, cycle)
698 """A pprint that just redirects to the normal repr function."""
699 # Find newlines and replace them with p.break_()
--> 700 output = repr(obj)
701 lines = output.splitlines()
702 with p.group():
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/model.py in __repr__(self)
430
431 def __repr__(self):
--> 432 return str(self)
433
434 def delete(self):
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/mixins.py in __str__(x)
66
67 def __str__(x):
---> 68 return x.__unicode__()
69
70 else:
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/model.py in __unicode__(self)
427
428 def __unicode__(self):
--> 429 return u"{0}(name={1})".format(self.__class__.__name__, self.name)
430
431 def __repr__(self):
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/core/interfaces.py in name(self)
891 """
892 name = super(Interface, self).name
--> 893 return name if name else self.data.get("name")
894
895 @property
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/decorators.py in __get__(self, obj, cls)
95 if obj is None:
96 return self
---> 97 value = obj.__dict__[self.func.__name__] = self.func(obj)
98 return value
99
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/model.py in data(self)
384 @cached_property
385 def data(self):
--> 386 return LoadElement(self.href)
387
388 @property
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/model.py in LoadElement(href, only_etag)
113 if only_etag:
114 return result.etag
--> 115 return ElementCache(result.json, etag=result.etag)
116
117
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/model.py in __init__(self, data, **kw)
170 def __init__(self, data=None, **kw):
171 self._etag = kw.pop("etag", None)
--> 172 super(ElementCache, self).__init__(data=data if data else {})
173
174 def etag(self, href):
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/structs.py in __init__(self, data, **kwargs)
156 def __init__(self, data=None, **kwargs):
157 self.data = data if data else {}
--> 158 self.update(self.data, **kwargs)
159
160 def __setitem__(self, key, value):
~/.pyenv/versions/3.6.15/lib/python3.6/_collections_abc.py in update(*args, **kwds)
844 self[key] = other[key]
845 else:
--> 846 for key, value in other:
847 self[key] = value
848 for key, value in kwds.items():
ValueError: too many values to unpack (expected 2)Engine Data :
{'active_wait_time': 'short',
'alias_value': [{'alias_ref': 'http://X.X.X.X:8082/6.10/elements/alias/268480220',
'translated_element': ['http://X.X.X.X:8082/6.10/elements/network/268477287']},
{'alias_ref': 'http://X.X.X.X:8082/6.10/elements/alias/10685',
'translated_element': ['http://X.X.X.X:8082/6.10/elements/network/268477287']},
{'alias_ref': 'http://X.X.X.X:8082/6.10/elements/alias/268482666',
'translated_element': ['http://X.X.X.X:8082/6.10/elements/network/268477287']}],
'allow_email_upn_lookup': False,
'antispoofing_node_ref': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/antispoofing/268481855',
'antivirus': {'antivirus_enabled': False,
'antivirus_http_proxy': '',
'antivirus_http_proxy_enabled': False,
'antivirus_proxy_port': 0,
'antivirus_proxy_user': '',
'antivirus_update': 'daily',
'antivirus_update_day': 'mo',
'antivirus_update_time': 0,
'virus_log_level': 'none',
'virus_mirror': 'update.nai.com/Products/CommonUpdater'},
'auto_reboot_timeout': 10,
'automatic_rules_settings': {'allow_auth_traffic': True,
'allow_connections_to_dns_resolvers': True,
'allow_connections_to_remote_dhcp_server': True,
'allow_icmp_traffic_for_route_probing': True,
'allow_listening_interfaces_to_dns_relay_port': True,
'allow_no_nat': True,
'log_level': 'none'},
'client_cert_identity_field': '',
'comment': '1807',
'connection_limit': 0,
'connection_timeout': [{'protocol': 'tcp', 'timeout': 1800},
{'protocol': 'udp', 'timeout': 50},
{'protocol': 'icmp', 'timeout': 5},
{'protocol': 'other', 'timeout': 180}],
'contact_timeout': 360000,
'control_plane_mode': 'not_reserved',
'custom_properties_profile': [],
'default_nat': 'true',
'dns_relay_interface': [],
'domain_server_address': [{'rank': 0.0, 'value': '10.121.163.194'},
{'rank': 1.0, 'value': '10.30.3.197'},
{'rank': 2.0, 'value': '8.8.8.8'}],
'dos_protection': 'default_off',
'dynamic_routing': {'antispoofing_ne_ref': [],
'bgp': {'announced_ne_setting': [], 'enabled': False},
'ospfv2': {'enabled': False}},
'engine_version': 'version 6.10.12 #26603',
'excluded_interface': -1,
'file_reputation_settings': {'file_reputation_context': 'disabled',
'http_proxy': []},
'gateway_settings_ref': 'http://X.X.X.X:8082/6.10/elements/gateway_settings/1',
'granted_policy_ref': [],
'icap_dlp_server_ref': [],
'include_interfaces_for_control_plane': False,
'inspection_cpu_balancing_mode': 'default',
'internal_gateway_ref': ['http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway/268437240'],
'is_cert_auto_renewal': True,
'is_config_encrypted': False,
'is_fips_compatible_operating_mode': False,
'is_fips_disable_engine_sginfo': False,
'is_fips_disable_engine_upgrades': False,
'is_icap_dlp_enabled': False,
'is_loopback_tunnel_ip_address_enforced': False,
'is_snort_enabled': False,
'is_snort_file_defined': False,
'is_virtual_defrag': True,
'key': 268492219,
'known_host_lists_ref': [],
'l2fw_settings': {'bypass_overload_traffic': False,
'tracking_mode': 'normal'},
'link': [{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219',
'rel': 'self',
'type': 'single_fw'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/export',
'rel': 'export'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/history',
'rel': 'history'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/lock',
'rel': 'lock'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/search_category_tags_from_element',
'rel': 'search_category_tags_from_element'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/contact_addresses',
'rel': 'contact_addresses'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/duplicate',
'rel': 'duplicate'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/refresh',
'rel': 'refresh'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/upload',
'rel': 'upload'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/node',
'rel': 'nodes'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/interface',
'rel': 'interfaces'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/link_usage_exception_rule',
'rel': 'link_usage_exception_rule'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/generate_snapshot',
'rel': 'generate_snapshot'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/add_route',
'rel': 'add_route'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/query_route',
'rel': 'query_route'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/upload_result',
'rel': 'upload_result'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/blacklist',
'rel': 'blacklist'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/permissions',
'rel': 'permissions'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/blacklist/flush',
'rel': 'flush_blacklist'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/alias_resolving',
'rel': 'alias_resolving'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/routing_monitoring',
'rel': 'routing_monitoring'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/web_auth_https/delete_certificate',
'rel': 'web_auth_https_delete_certificate'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/web_auth_https/delete_certificate_request',
'rel': 'web_auth_https_delete_certificate_request'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/web_auth_https/export_certificate',
'rel': 'web_auth_https_export_certificate'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/web_auth_https/export_certificate_request',
'rel': 'web_auth_https_export_certificate_request'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/web_auth_https/import_certificate',
'rel': 'web_auth_https_import_certificate'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/web_auth_https/generate_and_sign_certificate',
'rel': 'web_auth_https_generate_and_sign_certificate'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/web_auth_https/generate_certificate_request',
'rel': 'web_auth_https_generate_certificate_request'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/web_auth_https/sign_certificate_request',
'rel': 'web_auth_https_sign_certificate_request'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/dxl_cert',
'rel': 'dxl_cert'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/pending_changes',
'rel': 'pending_changes'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/approve_all_changes',
'rel': 'approve_all_changes'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/disapprove_all_changes',
'rel': 'disapprove_all_changes'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/vpn_mapping',
'rel': 'vpn_mapping'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/ldap_replication',
'rel': 'ldap_replication'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/quagga_preview',
'rel': 'quagga_preview'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/validate_routing_antispoofing',
'rel': 'validate_routing_antispoofing'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/snort_configuration_file/export',
'rel': 'snort_configuration_file_export'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/snort_configuration_file/import',
'rel': 'snort_configuration_file_import'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/snort_configuration_file/delete',
'rel': 'snort_configuration_file_delete'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway',
'rel': 'internal_gateway',
'type': 'internal_gateway'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/routing/268470935',
'rel': 'routing',
'type': 'routing'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/link_usage_exception_rule',
'rel': 'link_usage_exception_rule',
'type': 'link_usage_exception_rule'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/antispoofing/268481855',
'rel': 'antispoofing',
'type': 'antispoofing'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/snapshot',
'rel': 'snapshots',
'type': 'snapshot'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/physical_interface',
'rel': 'physical_interface',
'type': 'physical_interface'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/tunnel_interface',
'rel': 'tunnel_interface',
'type': 'tunnel_interface'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/vpn_broker_interface',
'rel': 'vpn_broker_interface',
'type': 'vpn_broker_interface'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/modem_interface',
'rel': 'modem_interface',
'type': 'modem_interface'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/adsl_interface',
'rel': 'adsl_interface',
'type': 'adsl_interface'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/wireless_interface',
'rel': 'wireless_interface',
'type': 'wireless_interface'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/switch_interface',
'rel': 'switch_interface',
'type': 'switch_interface'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/ssh_host_key',
'rel': 'ssh_host_key',
'type': 'ssh_host_key'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node',
'rel': 'firewall_node',
'type': 'firewall_node'}],
'link_usage_exception_rules': [],
'lldp_profile_ref': 'http://X.X.X.X:8082/6.10/elements/lldp_profile/268435458',
'location_ref': 'http://X.X.X.X:8082/6.10/elements/location/1',
'locked': False,
'log_moderation': [],
'log_server_ref': 'http://X.X.X.X:8082/6.10/elements/log_server/268501725',
'log_spooling_policy': 'discard',
'multicast_routing_mode': 'none',
'name': 'ENGINE-01',
'nat_definition': [{'enabled_interface': [],
'key': 268437162,
'nat_type': 'dynamic',
'private_ne_ref': 'http://X.X.X.X:8082/6.10/elements/network/268492218',
'public_ne_ref': 'http://X.X.X.X:8082/6.10/elements/outbound_multilink/268492224',
'service_ref': []}],
'nodes': [{'firewall_node': {'activate_test': True,
'appliance_info': {'cloud_id': 'N/A',
'cloud_type': 'NONE',
'first_upload_time': 1649085098475,
'hardware_version': '151.0',
'initial_contact_time': 1678803285382,
'initial_license_remaining_days': 0,
'product_name': '120-0-C1',
'proof_of_serial': '3bf55e57d5-a0b26ae5b1',
'software_features': 'SECNODE+ALLOWX64=YES+ANTIVIRUS=YES+DYNAMIC_ROUTING=YES+USERS=YES+URL_SERVICE2=YES+URL_SERVICE3=YES+DEVICECLASS=100+VPN=YES',
'software_version': '6.11'},
'disabled': False,
'engine_version': 'version 6.10.12 #26603',
'key': 268492220,
'link': [{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220',
'rel': 'self',
'type': 'firewall_node'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/fetch_license',
'rel': 'fetch'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/bind_license',
'rel': 'bind'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/unbind_license',
'rel': 'unbind'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/cancel_unbind_license',
'rel': 'cancel_unbind'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/initial_contact',
'rel': 'initial_contact'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/appliance_status',
'rel': 'appliance_status'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/status',
'rel': 'status'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/go_online',
'rel': 'go_online'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/go_offline',
'rel': 'go_offline'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/go_standby',
'rel': 'go_standby'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/lock_online',
'rel': 'lock_online'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/lock_offline',
'rel': 'lock_offline'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/reset_user_db',
'rel': 'reset_user_db'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/diagnostic',
'rel': 'diagnostic'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/send_diagnostic',
'rel': 'send_diagnostic'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/reboot',
'rel': 'reboot'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/power_off',cust-
'rel': 'power_off'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/reset_to_factory',
'rel': 'reset_to_factory'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/sginfo',
'rel': 'sginfo'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/ssh',
'rel': 'ssh'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/change_ssh_pwd',
'rel': 'change_ssh_pwd'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/time_sync',
'rel': 'time_sync'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/certificate_info',
'rel': 'certificate_info'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/dynamic_element_update',
'rel': 'dynamic_element_update'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/pki_export_certificate_request',
'rel': 'pki_export_certificate_request'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/pki_import_certificate',
'rel': 'pki_import_certificate'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/pki_delete_certificate_request',
'rel': 'pki_delete_certificate_request'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/pki_abort_certificate_request',
'rel': 'pki_abort_certificate_request'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/pki_certificate_info',
'rel': 'pki_certificate_info'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/pki_start_certificate_renewal',
'rel': 'pki_start_certificate_renewal'}],
'loopback_node_dedicated_interface': [],
'name': 'ENGINE-01 node 1',
'nodeid': 1,
'snmp_engine_id': '',
'tests': []}}],
'ntp_settings': {'ntp_enable': False, 'ntp_server_ref': []},
'opcua_client_x509_credentials': [],
'opcua_decryption_mode': 'none',
'opcua_server_x509_credentials': [],
'passive_discard_mode': False,
'physicalInterfaces': [{'physical_interface': {'aggregate_mode': 'none',
'arp_entry': [],
'cvi_mode': 'none',
'dhcp_server_on_interface': {'default_gateway': '10.157.24.1',
'default_lease_time': 36000,
'dhcp_address_range': '10.157.24.16-10.157.24.126',
'dhcp_range_per_node': [],
'domain_name_search_list': '',
'primary_dns_server': '10.121.163.194',
'secondary_dns_server': '10.30.3.197'},
'duplicate_address_detection': True,
'include_prefix_info_option_flag': False,
'interface_id': '4',
'interfaces': [{'single_node_interface': {'address': '10.157.24.1',
'apn': 'internet',
'auth_request': True,
'auth_request_source': False,
'automatic_default_route': False,
'backup_heartbeat': False,
'backup_mgt': False,
'domain_specific_dns_queries_source': False,
'dynamic': False,
'igmp_mode': 'none',
'key': 268444176,
'network_value': '10.157.24.0/25',
'nicid': '4',
'nodeid': 1,
'outgoing': True,
'phone_number': '*99#',
'pppoa': False,
'pppoe': False,
'primary_heartbeat': False,
'primary_mgt': False,
'relayed_by_dhcp': False,
'reverse_connection': False,
'vrrp': False,
'vrrp_id': -1,
'vrrp_priority': -1}}],
'key': 268444809,
'link': [{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/physical_interface/268444809',
'rel': 'self',
'type': 'physical_interface'}],
'lldp_mode': 'disabled',
'log_moderation': [],
'managed_address_flag': False,
'mtu': -1,
'name': 'Interface 4',
'other_configuration_flag': False,
'override_engine_settings': False,
'override_log_moderation_settings': False,
'qos_limit': -1,
'qos_mode': 'no_qos',
'route_replies_back_mode': False,
'router_advertisement': False,
'set_autonomous_address_flag': False,
'shared_interface': False,
'syn_mode': 'default',
'sync_parameter': {'full_sync_interval': 5000,
'heartbeat_group_ip': '224.0.0.221',
'incr_sync_interval': 50,
'statesync_group_ip': '224.0.0.222',
'sync_mode': 'sync_all',
'sync_security': 'sign'},
'virtual_engine_vlan_ok': False,
'virtual_resource_settings': [],
'vlanInterfaces': []}},
{'vpn_broker_interface': {'adjust_antispoofing': True,
'arp_entry': [],
'comment': 'VPN Broker - EUA Domain',
'dhcp_server_on_interface': {'default_lease_time': 7200,
'dhcp_range_per_node': []},
'duplicate_address_detection': True,
'gateway_ref': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway/268437240',
'include_prefix_info_option_flag': False,
'interface_id': 'VPN_0',
'interfaces': [{'single_node_interface': {'address': '172.16.2.30',
'apn': 'internet',
'auth_request': False,
'auth_request_source': False,
'automatic_default_route': False,
'backup_heartbeat': False,
'backup_mgt': False,
'domain_specific_dns_queries_source': False,
'dynamic': False,
'igmp_mode': 'none',
'key': 268444178,
'network_value': '172.16.0.0/21',
'nicid': 'VPN_0',
'nodeid': 1,
'outgoing': False,
'phone_number': '*99#',
'pppoa': False,
'pppoe': False,
'primary_heartbeat': False,
'primary_mgt': False,
'relayed_by_dhcp': False,
'reverse_connection': False,
'vrrp': False,
'vrrp_id': -1,
'vrrp_priority': -1}}],
'key': 268444811,
'link': [{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/vpn_broker_interface/268444811',
'rel': 'self',
'type': 'vpn_broker_interface'}],
'log_moderation': [],
'mac_address_postfix': 'fa:02:19',
'managed_address_flag': False,
'mtu': -1,
'name': 'VPN Broker Interface 0',
'other_configuration_flag': False,
'override_engine_settings': False,
'override_log_moderation_settings': False,
'qos_limit': -1,
'qos_mode': 'no_qos',
'retrieve_routes': 'true',
'router_advertisement': False,
'set_autonomous_address_flag': False,
'shared_interface': False,
'shared_secret': '*****',
'syn_mode': 'default',
'virtual_resource_settings': [],
'vpn_broker_domain_ref': 'http://X.X.X.X:8082/6.10/elements/vpn_broker_domain/268435460'}},
{'physical_interface': {'aggregate_mode': 'none',
'arp_entry': [],
'cvi_mode': 'none',
'dhcp_server_on_interface': {'default_lease_time': 7200,
'dhcp_range_per_node': []},
'duplicate_address_detection': True,
'include_prefix_info_option_flag': False,
'interface_id': '0',
'interfaces': [{'single_node_interface': {'apn': 'internet',
'auth_request': False,
'auth_request_source': False,
'automatic_default_route': True,
'backup_heartbeat': False,
'backup_mgt': False,
'domain_specific_dns_queries_source': False,
'dynamic': True,
'dynamic_index': 1,
'igmp_mode': 'none',
'key': 268444177,
'nicid': '0',
'nodeid': 1,
'outgoing': False,
'phone_number': '*99#',
'pppoa': False,
'pppoe': False,
'primary_heartbeat': False,
'primary_mgt': True,
'relayed_by_dhcp': False,
'reverse_connection': True,
'vrrp': False,
'vrrp_id': -1,
'vrrp_priority': -1}}],
'key': 268444810,
'link': [{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/physical_interface/268444810',
'rel': 'self',
'type': 'physical_interface'}],
'lldp_mode': 'disabled',
'log_moderation': [],
'managed_address_flag': False,
'mtu': -1,
'name': 'Interface 0',
'other_configuration_flag': False,
'override_engine_settings': False,
'override_log_moderation_settings': False,
'qos_limit': -1,
'qos_mode': 'no_qos',
'route_replies_back_mode': False,
'router_advertisement': False,
'set_autonomous_address_flag': False,
'shared_interface': False,
'syn_mode': 'default',
'sync_parameter': {'full_sync_interval': 5000,
'heartbeat_group_ip': '224.0.0.221',
'incr_sync_interval': 50,
'statesync_group_ip': '224.0.0.222',
'sync_mode': 'sync_all',
'sync_security': 'sign'},
'virtual_engine_vlan_ok': False,
'virtual_resource_settings': [],
'vlanInterfaces': []}}],
'policy_route': [],
'read_only': False,
'reporting_email_addresses': '',
'rollback_timeout': 60,
'routing_node_ref': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/routing/268470935',
'sandbox_type': 'none',
'scan_detection': {'log_level': 'stored',
'scan_detection_icmp_events': 220,
'scan_detection_icmp_timewindow': 1,
'scan_detection_icmp_unit': 'minute',
'scan_detection_tcp_events': 220,
'scan_detection_tcp_timewindow': 1,
'scan_detection_tcp_unit': 'minute',
'scan_detection_type': 'default off',
'scan_detection_udp_events': 220,
'scan_detection_udp_timewindow': 1,
'scan_detection_udp_unit': 'minute'},
'send_reset_for_out_of_state_tcp_packets': 'no',
'server_credential': [],
'sidewinder_proxy_enabled': False,
'slow_request_blacklist_timeout': 0,
'slow_request_sensitivity': 'low',
'snmp_agent_ref': 'http://X.X.X.X:8082/6.10/elements/snmp_agent/1',
'snmp_interface': [],
'snmp_location': '',
'ssh_host_key': [],
'ssm_advanced_setting': [],
'static_multicast_route': [],
'strict_tcp_mode': False,
'syn_flood_sensitivity': 'medium',
'syn_mode': 'off',
'system': False,
'system_key': -1,
'tcp_reset_sensitivity': 'off',
'tester_parameters': {'alert_interval': 3600,
'auto_recovery': True,
'boot_delay': 30,
'boot_recovery': True,
'restart_delay': 5,
'status_delay': 5},
'tests': [{'external_test': {'alert_notification': False,
'command_line': '/data/home/root/fpmetrics',
'key': 268436298,
'name': 'fpmetrics',
'offline_state': True,
'online_state': True,
'retry_count': 1,
'snmp_notification': False,
'standby_state': True,
'test_action': 'none',
'test_active': True,
'test_interval': 300,
'test_timeout': 30000}}],
'timezone': 'UTC',
'tls_client_protection': [],
'tls_crl_checks': False,
'tls_deny_decrypting': True,
'tracking_mode': 'normal',
'trashed': False,
'ts_settings': {'http_proxy': [], 'ts_enabled': False},
'web_authentication': {'all_interfaces': True,
'authentication_idle_timeout': 3600,
'authentication_timeout': 3600,
'enabled_interface': [],
'enforce_https': False,
'key_length': 0,
'page_ref': 'http://X.X.X.X:8082/6.10/elements/web_authentication_page/3',
'session_handling': False,
'use_cert_bba': False}}Kind regards, Fabien Gazelot
fgazelot
commented
10 months ago Hello,
I have open a issue in Support Forcepoint : 05521159
In this case, you will find the backup SMC. I don't know if you can access to this.
If no, how we can move forward on the subject ?
Today, i find this issue on only 3 engines on my SMC.
Kind regards, Fabien gazelot.
lilianValeroFp
commented
10 months ago Hi, perfect! We will retrieve it and we will let you know about the progress.
lilianValeroFp
commented
10 months ago I reproduced your issue with your backup. We are working on... I suspect that in some cases, the dynamic interface is not retrieved correctly and so the interface_id cannot be exposed. As workaround, you can try to list all interfaces of the engine and try to map the ip of the internal endpoint from the interface ip.
fgazelot
commented
10 months ago Hello,
Thank's for your work ! i'm happy if you can reproduce the issue.
In the Forcpeoint case, you can see my new exemple and it's a static interface but i got the same error. That's why i change the title of this issue.
The workaround can work only on the static interface. I tried this morning to find a way to map Engine.Interfaces and Engine.vpn_endpoints without success yet.
kind regards, Fgazelot
lilianValeroFp
commented
10 months ago Another workaround would be to edit the guilty engines on the UI by putting a contact address for example then you can revert the change. The purpose is to re-sync the ip id of the interface and the endpoint ip id. Let us know.
lilianValeroFp
commented
10 months ago The fix will be available on 6.10.14/7.1.2/7.2.0 SMC versions
fgazelot
commented
10 months ago Hello,
Thanks for your work.
We tried the workaround "update the interface" without success.(change contact address and other configuration)
However, a delete and recreation of the interface fix the bug in 6.10.12 SMC.
Kind regards, Fabien Gazelot.
Hello,
I dont know if it's only on my environement, but i get a error when i tried to use function 'interface_id' from a endpoint when this endpoint is set with DHCP :
How to reproduce the error :
Engine interfaces :
Result :
Folowed by this Error :
The Endpoint data :
As you can see, we dont have the key "physical_interface" in the Endpoint 3 (dhcp mode)
Information of my environement :
Thank you in advance for your help
Kind regards, Fgazelot