gabstopper / ansible-stonesoft

Ansible libraries for automating Stonesoft FW Management
Apache License 2.0
10 stars 3 forks source link

Multiple IP on the same interface #24

Open stonianlab opened 6 years ago

stonianlab commented 6 years ago

Hi David

I'm trying to create multiple single NGFW but with multiple IP on a single physical interface. With the "engine" module, if I create multiple "nodes" entries with always the same node, JSON format is corrupted as all the IP address are used for the authentication request parameter and default outgoing IP.

Result: "Impossible to store the element myfwtestun. Element appears invalid: There must be one and only one Interface with static IP Address used for Authentication Request."

Json parameters "auth_request" and "outgoing" can't have multiple entries. Would it be possible for the engine module to choose the first IP by default (as the SMC does) or to add fields "auth_request" and "outgoing" to the engine module? (possible entries for those: false/true)

Thanks Remi

gabstopper commented 6 years ago

Hi Remi, I will address. With the current release multiple IP's are not handled although supported in smc-python. I'll fix this in the ansible configuration for you though. Also it seems I wasn't preventing this in the ansible module either (which was not by design). Either way i'll handle multiple IPs on a single address.

stonianlab commented 6 years ago

Hi David Good to know if that's already handled in smc-python, thanks!