Comments (10)
fgazelot
commented on July 25, 2024
Hello,
I can't reproduce the issue in my dev SMC.. I thought it was linked to DHCP, but I can't find the issue on another engine with DHCP setup on the same SMC or dev SMC.
Do you have any idea why we can't find "interface_id" in an other case ?
Kind regards,
FGazelot
from fp-ngfw-smc-python.
gregory83
commented on July 25, 2024
Hello,
I've been trying to reproduce the issue without success. I would need more details about the endpoints of this engine giving the error.
BR,
/Greg.
from fp-ngfw-smc-python.
fgazelot
commented on July 25, 2024
Hello,
Thanks you for taking time for my issue. Finaly, i find this issue only with one Engine ..
I don't know how to give you more than :
In [6]: for endpoint in vpn_endpoint:
...: print(endpoint.data.data)
...:
{'address': '10.157.24.1', 'connection_type_ref': 'http://X.X.X.X:8082/6.10/elements/connection_type/1', 'deducted_name': '10.157.24.1', 'dynamic': False, 'enabled': False, 'force_nat_t': False, 'ike_phase1_id_type': 3, 'ipsec_vpn': True, 'key': 268443370, 'link': [{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway/268437240/internal_endpoint/268443370', 'rel': 'self', 'type': 'internal_endpoint'}, {'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway/268437240/internal_endpoint/268443370/history', 'rel': 'history'}, {'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway/268437240/internal_endpoint/268443370/lock', 'rel': 'lock'}], 'locked': False, 'nat_t': True, 'physical_interface': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/physical_interface/268444809', 'read_only': False, 'ssl_vpn_portal': True, 'ssl_vpn_tunnel': True, 'system': False, 'system_key': -1, 'trashed': False, 'udp_encapsulation': False}
{'address': '172.16.2.30', 'connection_type_ref': 'http://X.X.X.X:8082/6.10/elements/connection_type/1', 'deducted_name': '172.16.2.30', 'dynamic': False, 'enabled': False, 'force_nat_t': False, 'ike_phase1_id_type': 3, 'ipsec_vpn': True, 'key': 268443371, 'link': [{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway/268437240/internal_endpoint/268443371', 'rel': 'self', 'type': 'internal_endpoint'}, {'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway/268437240/internal_endpoint/268443371/history', 'rel': 'history'}, {'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway/268437240/internal_endpoint/268443371/lock', 'rel': 'lock'}], 'locked': False, 'nat_t': True, 'physical_interface': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/vpn_broker_interface/268444811', 'read_only': False, 'ssl_vpn_portal': True, 'ssl_vpn_tunnel': True, 'system': False, 'system_key': -1, 'trashed': False, 'udp_encapsulation': False}
{'connection_type_ref': 'http://X.X.X.X:8082/6.10/elements/connection_type/268435467', 'deducted_name': 'First DHCP Interface ip', 'dynamic': True, 'enabled': True, 'force_nat_t': False, 'ike_phase1_id_type': 1, 'ike_phase1_id_value': '[email protected]', 'ipsec_vpn': True, 'key': 268443372, 'link': [{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway/268437240/internal_endpoint/268443372', 'rel': 'self', 'type': 'internal_endpoint'}, {'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway/268437240/internal_endpoint/268443372/history', 'rel': 'history'}, {'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway/268437240/internal_endpoint/268443372/lock', 'rel': 'lock'}], 'locked': False, 'nat_t': True, 'read_only': False, 'ssl_vpn_portal': False, 'ssl_vpn_tunnel': False, 'system': False, 'system_key': -1, 'trashed': False, 'udp_encapsulation': False}
In [8]: vpn_endpoint[2]
Out[8]: InternalEndpoint(name=First DHCP Interface ip)
In [9]:
In [9]: issue_endpoint = vpn_endpoint[2]
In [10]: issue_endpoint.interface_id
---------------------------------------------------------------------------
ValueError Traceback (most recent call last)
<ipython-input-10-a959dd5c40e5> in <module>
----> 1 issue_endpoint.interface_id
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/core/engine.py in interface_id(self)
2164 :return: str interface id
2165 """
-> 2166 return self.physical_interface.interface_id
2167
2168 @property
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/core/interfaces.py in interface_id(self)
706 :rtype: str
707 """
--> 708 return self.data.get("interface_id")
709
710 @interface_id.setter
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/decorators.py in __get__(self, obj, cls)
95 if obj is None:
96 return self
---> 97 value = obj.__dict__[self.func.__name__] = self.func(obj)
98 return value
99
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/model.py in data(self)
384 @cached_property
385 def data(self):
--> 386 return LoadElement(self.href)
387
388 @property
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/model.py in LoadElement(href, only_etag)
113 if only_etag:
114 return result.etag
--> 115 return ElementCache(result.json, etag=result.etag)
116
117
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/model.py in __init__(self, data, **kw)
170 def __init__(self, data=None, **kw):
171 self._etag = kw.pop("etag", None)
--> 172 super(ElementCache, self).__init__(data=data if data else {})
173
174 def etag(self, href):
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/structs.py in __init__(self, data, **kwargs)
156 def __init__(self, data=None, **kwargs):
157 self.data = data if data else {}
--> 158 self.update(self.data, **kwargs)
159
160 def __setitem__(self, key, value):
~/.pyenv/versions/3.6.15/lib/python3.6/_collections_abc.py in update(*args, **kwds)
844 self[key] = other[key]
845 else:
--> 846 for key, value in other:
847 self[key] = value
848 for key, value in kwds.items():
ValueError: too many values to unpack (expected 2)
In [11]: issue_endpoint.physical_interface
Out[11]: ---------------------------------------------------------------------------
ValueError Traceback (most recent call last)
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/IPython/core/formatters.py in __call__(self, obj)
700 type_pprinters=self.type_printers,
701 deferred_pprinters=self.deferred_printers)
--> 702 printer.pretty(obj)
703 printer.flush()
704 return stream.getvalue()
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/IPython/lib/pretty.py in pretty(self, obj)
392 if cls is not object \
393 and callable(cls.__dict__.get('__repr__')):
--> 394 return _repr_pprint(obj, self, cycle)
395
396 return _default_pprint(obj, self, cycle)
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/IPython/lib/pretty.py in _repr_pprint(obj, p, cycle)
698 """A pprint that just redirects to the normal repr function."""
699 # Find newlines and replace them with p.break_()
--> 700 output = repr(obj)
701 lines = output.splitlines()
702 with p.group():
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/model.py in __repr__(self)
430
431 def __repr__(self):
--> 432 return str(self)
433
434 def delete(self):
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/mixins.py in __str__(x)
66
67 def __str__(x):
---> 68 return x.__unicode__()
69
70 else:
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/model.py in __unicode__(self)
427
428 def __unicode__(self):
--> 429 return u"{0}(name={1})".format(self.__class__.__name__, self.name)
430
431 def __repr__(self):
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/core/interfaces.py in name(self)
891 """
892 name = super(Interface, self).name
--> 893 return name if name else self.data.get("name")
894
895 @property
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/decorators.py in __get__(self, obj, cls)
95 if obj is None:
96 return self
---> 97 value = obj.__dict__[self.func.__name__] = self.func(obj)
98 return value
99
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/model.py in data(self)
384 @cached_property
385 def data(self):
--> 386 return LoadElement(self.href)
387
388 @property
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/model.py in LoadElement(href, only_etag)
113 if only_etag:
114 return result.etag
--> 115 return ElementCache(result.json, etag=result.etag)
116
117
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/model.py in __init__(self, data, **kw)
170 def __init__(self, data=None, **kw):
171 self._etag = kw.pop("etag", None)
--> 172 super(ElementCache, self).__init__(data=data if data else {})
173
174 def etag(self, href):
~/Documents/newlode/dev/cust-sase-ipsec/.direnv/python-3.6/lib/python3.6/site-packages/smc/base/structs.py in __init__(self, data, **kwargs)
156 def __init__(self, data=None, **kwargs):
157 self.data = data if data else {}
--> 158 self.update(self.data, **kwargs)
159
160 def __setitem__(self, key, value):
~/.pyenv/versions/3.6.15/lib/python3.6/_collections_abc.py in update(*args, **kwds)
844 self[key] = other[key]
845 else:
--> 846 for key, value in other:
847 self[key] = value
848 for key, value in kwds.items():
ValueError: too many values to unpack (expected 2)
Engine Data :
{'active_wait_time': 'short',
'alias_value': [{'alias_ref': 'http://X.X.X.X:8082/6.10/elements/alias/268480220',
'translated_element': ['http://X.X.X.X:8082/6.10/elements/network/268477287']},
{'alias_ref': 'http://X.X.X.X:8082/6.10/elements/alias/10685',
'translated_element': ['http://X.X.X.X:8082/6.10/elements/network/268477287']},
{'alias_ref': 'http://X.X.X.X:8082/6.10/elements/alias/268482666',
'translated_element': ['http://X.X.X.X:8082/6.10/elements/network/268477287']}],
'allow_email_upn_lookup': False,
'antispoofing_node_ref': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/antispoofing/268481855',
'antivirus': {'antivirus_enabled': False,
'antivirus_http_proxy': '',
'antivirus_http_proxy_enabled': False,
'antivirus_proxy_port': 0,
'antivirus_proxy_user': '',
'antivirus_update': 'daily',
'antivirus_update_day': 'mo',
'antivirus_update_time': 0,
'virus_log_level': 'none',
'virus_mirror': 'update.nai.com/Products/CommonUpdater'},
'auto_reboot_timeout': 10,
'automatic_rules_settings': {'allow_auth_traffic': True,
'allow_connections_to_dns_resolvers': True,
'allow_connections_to_remote_dhcp_server': True,
'allow_icmp_traffic_for_route_probing': True,
'allow_listening_interfaces_to_dns_relay_port': True,
'allow_no_nat': True,
'log_level': 'none'},
'client_cert_identity_field': '',
'comment': '1807',
'connection_limit': 0,
'connection_timeout': [{'protocol': 'tcp', 'timeout': 1800},
{'protocol': 'udp', 'timeout': 50},
{'protocol': 'icmp', 'timeout': 5},
{'protocol': 'other', 'timeout': 180}],
'contact_timeout': 360000,
'control_plane_mode': 'not_reserved',
'custom_properties_profile': [],
'default_nat': 'true',
'dns_relay_interface': [],
'domain_server_address': [{'rank': 0.0, 'value': '10.121.163.194'},
{'rank': 1.0, 'value': '10.30.3.197'},
{'rank': 2.0, 'value': '8.8.8.8'}],
'dos_protection': 'default_off',
'dynamic_routing': {'antispoofing_ne_ref': [],
'bgp': {'announced_ne_setting': [], 'enabled': False},
'ospfv2': {'enabled': False}},
'engine_version': 'version 6.10.12 #26603',
'excluded_interface': -1,
'file_reputation_settings': {'file_reputation_context': 'disabled',
'http_proxy': []},
'gateway_settings_ref': 'http://X.X.X.X:8082/6.10/elements/gateway_settings/1',
'granted_policy_ref': [],
'icap_dlp_server_ref': [],
'include_interfaces_for_control_plane': False,
'inspection_cpu_balancing_mode': 'default',
'internal_gateway_ref': ['http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway/268437240'],
'is_cert_auto_renewal': True,
'is_config_encrypted': False,
'is_fips_compatible_operating_mode': False,
'is_fips_disable_engine_sginfo': False,
'is_fips_disable_engine_upgrades': False,
'is_icap_dlp_enabled': False,
'is_loopback_tunnel_ip_address_enforced': False,
'is_snort_enabled': False,
'is_snort_file_defined': False,
'is_virtual_defrag': True,
'key': 268492219,
'known_host_lists_ref': [],
'l2fw_settings': {'bypass_overload_traffic': False,
'tracking_mode': 'normal'},
'link': [{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219',
'rel': 'self',
'type': 'single_fw'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/export',
'rel': 'export'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/history',
'rel': 'history'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/lock',
'rel': 'lock'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/search_category_tags_from_element',
'rel': 'search_category_tags_from_element'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/contact_addresses',
'rel': 'contact_addresses'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/duplicate',
'rel': 'duplicate'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/refresh',
'rel': 'refresh'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/upload',
'rel': 'upload'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/node',
'rel': 'nodes'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/interface',
'rel': 'interfaces'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/link_usage_exception_rule',
'rel': 'link_usage_exception_rule'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/generate_snapshot',
'rel': 'generate_snapshot'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/add_route',
'rel': 'add_route'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/query_route',
'rel': 'query_route'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/upload_result',
'rel': 'upload_result'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/blacklist',
'rel': 'blacklist'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/permissions',
'rel': 'permissions'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/blacklist/flush',
'rel': 'flush_blacklist'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/alias_resolving',
'rel': 'alias_resolving'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/routing_monitoring',
'rel': 'routing_monitoring'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/web_auth_https/delete_certificate',
'rel': 'web_auth_https_delete_certificate'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/web_auth_https/delete_certificate_request',
'rel': 'web_auth_https_delete_certificate_request'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/web_auth_https/export_certificate',
'rel': 'web_auth_https_export_certificate'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/web_auth_https/export_certificate_request',
'rel': 'web_auth_https_export_certificate_request'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/web_auth_https/import_certificate',
'rel': 'web_auth_https_import_certificate'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/web_auth_https/generate_and_sign_certificate',
'rel': 'web_auth_https_generate_and_sign_certificate'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/web_auth_https/generate_certificate_request',
'rel': 'web_auth_https_generate_certificate_request'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/web_auth_https/sign_certificate_request',
'rel': 'web_auth_https_sign_certificate_request'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/dxl_cert',
'rel': 'dxl_cert'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/pending_changes',
'rel': 'pending_changes'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/approve_all_changes',
'rel': 'approve_all_changes'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/disapprove_all_changes',
'rel': 'disapprove_all_changes'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/vpn_mapping',
'rel': 'vpn_mapping'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/ldap_replication',
'rel': 'ldap_replication'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/quagga_preview',
'rel': 'quagga_preview'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/validate_routing_antispoofing',
'rel': 'validate_routing_antispoofing'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/snort_configuration_file/export',
'rel': 'snort_configuration_file_export'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/snort_configuration_file/import',
'rel': 'snort_configuration_file_import'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/snort_configuration_file/delete',
'rel': 'snort_configuration_file_delete'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway',
'rel': 'internal_gateway',
'type': 'internal_gateway'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/routing/268470935',
'rel': 'routing',
'type': 'routing'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/link_usage_exception_rule',
'rel': 'link_usage_exception_rule',
'type': 'link_usage_exception_rule'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/antispoofing/268481855',
'rel': 'antispoofing',
'type': 'antispoofing'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/snapshot',
'rel': 'snapshots',
'type': 'snapshot'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/physical_interface',
'rel': 'physical_interface',
'type': 'physical_interface'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/tunnel_interface',
'rel': 'tunnel_interface',
'type': 'tunnel_interface'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/vpn_broker_interface',
'rel': 'vpn_broker_interface',
'type': 'vpn_broker_interface'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/modem_interface',
'rel': 'modem_interface',
'type': 'modem_interface'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/adsl_interface',
'rel': 'adsl_interface',
'type': 'adsl_interface'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/wireless_interface',
'rel': 'wireless_interface',
'type': 'wireless_interface'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/switch_interface',
'rel': 'switch_interface',
'type': 'switch_interface'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/ssh_host_key',
'rel': 'ssh_host_key',
'type': 'ssh_host_key'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node',
'rel': 'firewall_node',
'type': 'firewall_node'}],
'link_usage_exception_rules': [],
'lldp_profile_ref': 'http://X.X.X.X:8082/6.10/elements/lldp_profile/268435458',
'location_ref': 'http://X.X.X.X:8082/6.10/elements/location/1',
'locked': False,
'log_moderation': [],
'log_server_ref': 'http://X.X.X.X:8082/6.10/elements/log_server/268501725',
'log_spooling_policy': 'discard',
'multicast_routing_mode': 'none',
'name': 'ENGINE-01',
'nat_definition': [{'enabled_interface': [],
'key': 268437162,
'nat_type': 'dynamic',
'private_ne_ref': 'http://X.X.X.X:8082/6.10/elements/network/268492218',
'public_ne_ref': 'http://X.X.X.X:8082/6.10/elements/outbound_multilink/268492224',
'service_ref': []}],
'nodes': [{'firewall_node': {'activate_test': True,
'appliance_info': {'cloud_id': 'N/A',
'cloud_type': 'NONE',
'first_upload_time': 1649085098475,
'hardware_version': '151.0',
'initial_contact_time': 1678803285382,
'initial_license_remaining_days': 0,
'product_name': '120-0-C1',
'proof_of_serial': '3bf55e57d5-a0b26ae5b1',
'software_features': 'SECNODE+ALLOWX64=YES+ANTIVIRUS=YES+DYNAMIC_ROUTING=YES+USERS=YES+URL_SERVICE2=YES+URL_SERVICE3=YES+DEVICECLASS=100+VPN=YES',
'software_version': '6.11'},
'disabled': False,
'engine_version': 'version 6.10.12 #26603',
'key': 268492220,
'link': [{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220',
'rel': 'self',
'type': 'firewall_node'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/fetch_license',
'rel': 'fetch'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/bind_license',
'rel': 'bind'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/unbind_license',
'rel': 'unbind'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/cancel_unbind_license',
'rel': 'cancel_unbind'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/initial_contact',
'rel': 'initial_contact'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/appliance_status',
'rel': 'appliance_status'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/status',
'rel': 'status'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/go_online',
'rel': 'go_online'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/go_offline',
'rel': 'go_offline'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/go_standby',
'rel': 'go_standby'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/lock_online',
'rel': 'lock_online'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/lock_offline',
'rel': 'lock_offline'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/reset_user_db',
'rel': 'reset_user_db'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/diagnostic',
'rel': 'diagnostic'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/send_diagnostic',
'rel': 'send_diagnostic'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/reboot',
'rel': 'reboot'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/power_off',cust-
'rel': 'power_off'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/reset_to_factory',
'rel': 'reset_to_factory'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/sginfo',
'rel': 'sginfo'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/ssh',
'rel': 'ssh'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/change_ssh_pwd',
'rel': 'change_ssh_pwd'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/time_sync',
'rel': 'time_sync'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/certificate_info',
'rel': 'certificate_info'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/dynamic_element_update',
'rel': 'dynamic_element_update'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/pki_export_certificate_request',
'rel': 'pki_export_certificate_request'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/pki_import_certificate',
'rel': 'pki_import_certificate'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/pki_delete_certificate_request',
'rel': 'pki_delete_certificate_request'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/pki_abort_certificate_request',
'rel': 'pki_abort_certificate_request'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/pki_certificate_info',
'rel': 'pki_certificate_info'},
{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/firewall_node/268492220/pki_start_certificate_renewal',
'rel': 'pki_start_certificate_renewal'}],
'loopback_node_dedicated_interface': [],
'name': 'ENGINE-01 node 1',
'nodeid': 1,
'snmp_engine_id': '',
'tests': []}}],
'ntp_settings': {'ntp_enable': False, 'ntp_server_ref': []},
'opcua_client_x509_credentials': [],
'opcua_decryption_mode': 'none',
'opcua_server_x509_credentials': [],
'passive_discard_mode': False,
'physicalInterfaces': [{'physical_interface': {'aggregate_mode': 'none',
'arp_entry': [],
'cvi_mode': 'none',
'dhcp_server_on_interface': {'default_gateway': '10.157.24.1',
'default_lease_time': 36000,
'dhcp_address_range': '10.157.24.16-10.157.24.126',
'dhcp_range_per_node': [],
'domain_name_search_list': '',
'primary_dns_server': '10.121.163.194',
'secondary_dns_server': '10.30.3.197'},
'duplicate_address_detection': True,
'include_prefix_info_option_flag': False,
'interface_id': '4',
'interfaces': [{'single_node_interface': {'address': '10.157.24.1',
'apn': 'internet',
'auth_request': True,
'auth_request_source': False,
'automatic_default_route': False,
'backup_heartbeat': False,
'backup_mgt': False,
'domain_specific_dns_queries_source': False,
'dynamic': False,
'igmp_mode': 'none',
'key': 268444176,
'network_value': '10.157.24.0/25',
'nicid': '4',
'nodeid': 1,
'outgoing': True,
'phone_number': '*99#',
'pppoa': False,
'pppoe': False,
'primary_heartbeat': False,
'primary_mgt': False,
'relayed_by_dhcp': False,
'reverse_connection': False,
'vrrp': False,
'vrrp_id': -1,
'vrrp_priority': -1}}],
'key': 268444809,
'link': [{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/physical_interface/268444809',
'rel': 'self',
'type': 'physical_interface'}],
'lldp_mode': 'disabled',
'log_moderation': [],
'managed_address_flag': False,
'mtu': -1,
'name': 'Interface 4',
'other_configuration_flag': False,
'override_engine_settings': False,
'override_log_moderation_settings': False,
'qos_limit': -1,
'qos_mode': 'no_qos',
'route_replies_back_mode': False,
'router_advertisement': False,
'set_autonomous_address_flag': False,
'shared_interface': False,
'syn_mode': 'default',
'sync_parameter': {'full_sync_interval': 5000,
'heartbeat_group_ip': '224.0.0.221',
'incr_sync_interval': 50,
'statesync_group_ip': '224.0.0.222',
'sync_mode': 'sync_all',
'sync_security': 'sign'},
'virtual_engine_vlan_ok': False,
'virtual_resource_settings': [],
'vlanInterfaces': []}},
{'vpn_broker_interface': {'adjust_antispoofing': True,
'arp_entry': [],
'comment': 'VPN Broker - EUA Domain',
'dhcp_server_on_interface': {'default_lease_time': 7200,
'dhcp_range_per_node': []},
'duplicate_address_detection': True,
'gateway_ref': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/internal_gateway/268437240',
'include_prefix_info_option_flag': False,
'interface_id': 'VPN_0',
'interfaces': [{'single_node_interface': {'address': '172.16.2.30',
'apn': 'internet',
'auth_request': False,
'auth_request_source': False,
'automatic_default_route': False,
'backup_heartbeat': False,
'backup_mgt': False,
'domain_specific_dns_queries_source': False,
'dynamic': False,
'igmp_mode': 'none',
'key': 268444178,
'network_value': '172.16.0.0/21',
'nicid': 'VPN_0',
'nodeid': 1,
'outgoing': False,
'phone_number': '*99#',
'pppoa': False,
'pppoe': False,
'primary_heartbeat': False,
'primary_mgt': False,
'relayed_by_dhcp': False,
'reverse_connection': False,
'vrrp': False,
'vrrp_id': -1,
'vrrp_priority': -1}}],
'key': 268444811,
'link': [{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/vpn_broker_interface/268444811',
'rel': 'self',
'type': 'vpn_broker_interface'}],
'log_moderation': [],
'mac_address_postfix': 'fa:02:19',
'managed_address_flag': False,
'mtu': -1,
'name': 'VPN Broker Interface 0',
'other_configuration_flag': False,
'override_engine_settings': False,
'override_log_moderation_settings': False,
'qos_limit': -1,
'qos_mode': 'no_qos',
'retrieve_routes': 'true',
'router_advertisement': False,
'set_autonomous_address_flag': False,
'shared_interface': False,
'shared_secret': '*****',
'syn_mode': 'default',
'virtual_resource_settings': [],
'vpn_broker_domain_ref': 'http://X.X.X.X:8082/6.10/elements/vpn_broker_domain/268435460'}},
{'physical_interface': {'aggregate_mode': 'none',
'arp_entry': [],
'cvi_mode': 'none',
'dhcp_server_on_interface': {'default_lease_time': 7200,
'dhcp_range_per_node': []},
'duplicate_address_detection': True,
'include_prefix_info_option_flag': False,
'interface_id': '0',
'interfaces': [{'single_node_interface': {'apn': 'internet',
'auth_request': False,
'auth_request_source': False,
'automatic_default_route': True,
'backup_heartbeat': False,
'backup_mgt': False,
'domain_specific_dns_queries_source': False,
'dynamic': True,
'dynamic_index': 1,
'igmp_mode': 'none',
'key': 268444177,
'nicid': '0',
'nodeid': 1,
'outgoing': False,
'phone_number': '*99#',
'pppoa': False,
'pppoe': False,
'primary_heartbeat': False,
'primary_mgt': True,
'relayed_by_dhcp': False,
'reverse_connection': True,
'vrrp': False,
'vrrp_id': -1,
'vrrp_priority': -1}}],
'key': 268444810,
'link': [{'href': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/physical_interface/268444810',
'rel': 'self',
'type': 'physical_interface'}],
'lldp_mode': 'disabled',
'log_moderation': [],
'managed_address_flag': False,
'mtu': -1,
'name': 'Interface 0',
'other_configuration_flag': False,
'override_engine_settings': False,
'override_log_moderation_settings': False,
'qos_limit': -1,
'qos_mode': 'no_qos',
'route_replies_back_mode': False,
'router_advertisement': False,
'set_autonomous_address_flag': False,
'shared_interface': False,
'syn_mode': 'default',
'sync_parameter': {'full_sync_interval': 5000,
'heartbeat_group_ip': '224.0.0.221',
'incr_sync_interval': 50,
'statesync_group_ip': '224.0.0.222',
'sync_mode': 'sync_all',
'sync_security': 'sign'},
'virtual_engine_vlan_ok': False,
'virtual_resource_settings': [],
'vlanInterfaces': []}}],
'policy_route': [],
'read_only': False,
'reporting_email_addresses': '',
'rollback_timeout': 60,
'routing_node_ref': 'http://X.X.X.X:8082/6.10/elements/single_fw/268492219/routing/268470935',
'sandbox_type': 'none',
'scan_detection': {'log_level': 'stored',
'scan_detection_icmp_events': 220,
'scan_detection_icmp_timewindow': 1,
'scan_detection_icmp_unit': 'minute',
'scan_detection_tcp_events': 220,
'scan_detection_tcp_timewindow': 1,
'scan_detection_tcp_unit': 'minute',
'scan_detection_type': 'default off',
'scan_detection_udp_events': 220,
'scan_detection_udp_timewindow': 1,
'scan_detection_udp_unit': 'minute'},
'send_reset_for_out_of_state_tcp_packets': 'no',
'server_credential': [],
'sidewinder_proxy_enabled': False,
'slow_request_blacklist_timeout': 0,
'slow_request_sensitivity': 'low',
'snmp_agent_ref': 'http://X.X.X.X:8082/6.10/elements/snmp_agent/1',
'snmp_interface': [],
'snmp_location': '',
'ssh_host_key': [],
'ssm_advanced_setting': [],
'static_multicast_route': [],
'strict_tcp_mode': False,
'syn_flood_sensitivity': 'medium',
'syn_mode': 'off',
'system': False,
'system_key': -1,
'tcp_reset_sensitivity': 'off',
'tester_parameters': {'alert_interval': 3600,
'auto_recovery': True,
'boot_delay': 30,
'boot_recovery': True,
'restart_delay': 5,
'status_delay': 5},
'tests': [{'external_test': {'alert_notification': False,
'command_line': '/data/home/root/fpmetrics',
'key': 268436298,
'name': 'fpmetrics',
'offline_state': True,
'online_state': True,
'retry_count': 1,
'snmp_notification': False,
'standby_state': True,
'test_action': 'none',
'test_active': True,
'test_interval': 300,
'test_timeout': 30000}}],
'timezone': 'UTC',
'tls_client_protection': [],
'tls_crl_checks': False,
'tls_deny_decrypting': True,
'tracking_mode': 'normal',
'trashed': False,
'ts_settings': {'http_proxy': [], 'ts_enabled': False},
'web_authentication': {'all_interfaces': True,
'authentication_idle_timeout': 3600,
'authentication_timeout': 3600,
'enabled_interface': [],
'enforce_https': False,
'key_length': 0,
'page_ref': 'http://X.X.X.X:8082/6.10/elements/web_authentication_page/3',
'session_handling': False,
'use_cert_bba': False}}
Kind regards,
Fabien Gazelot
from fp-ngfw-smc-python.
fgazelot
commented on July 25, 2024
Hello,
I have open a issue in Support Forcepoint : 05521159
In this case, you will find the backup SMC. I don't know if you can access to this.
If no, how we can move forward on the subject ?
Today, i find this issue on only 3 engines on my SMC.
Kind regards,
Fabien gazelot.
from fp-ngfw-smc-python.
lilianValeroFp
commented on July 25, 2024
Hi, perfect! We will retrieve it and we will let you know about the progress.
from fp-ngfw-smc-python.
lilianValeroFp
commented on July 25, 2024
I reproduced your issue with your backup. We are working on...
I suspect that in some cases, the dynamic interface is not retrieved correctly and so the interface_id cannot be exposed.
As workaround, you can try to list all interfaces of the engine and try to map the ip of the internal endpoint from the interface ip.
from fp-ngfw-smc-python.
fgazelot
commented on July 25, 2024
Hello,
Thank's for your work ! i'm happy if you can reproduce the issue.
In the Forcpeoint case, you can see my new exemple and it's a static interface but i got the same error. That's why i change the title of this issue.
The workaround can work only on the static interface. I tried this morning to find a way to map Engine.Interfaces and Engine.vpn_endpoints without success yet.
kind regards,
Fgazelot
from fp-ngfw-smc-python.
lilianValeroFp
commented on July 25, 2024
Another workaround would be to edit the guilty engines on the UI by putting a contact address for example then you can revert the change. The purpose is to re-sync the ip id of the interface and the endpoint ip id. Let us know.
from fp-ngfw-smc-python.
lilianValeroFp
commented on July 25, 2024
The fix will be available on 6.10.14/7.1.2/7.2.0 SMC versions
from fp-ngfw-smc-python.
fgazelot
commented on July 25, 2024
Hello,
Thanks for your work.
We tried the workaround "update the interface" without success.(change contact address and other configuration)
However, a delete and recreation of the interface fix the bug in 6.10.12 SMC.
Kind regards,
Fabien Gazelot.
from fp-ngfw-smc-python.
Related Issues (20)
- Lock an smc element HOT 1
- Create users with password in InternalDomain HOT 11
- Wrong version number in "smc/__version__" HOT 1
- certificate verification warnings using the INI file for session creation HOT 2
- add an IP configuration on a tunnel interface without IP HOT 1
- ServerBackupTask fails HOT 2
- Viewing an Alias' references does not show the element referenced in the Alias, only the address. HOT 1
- Setting standby mode on a TunnelInterface HOT 5
- AttributeError when importing smc module HOT 9
- smc_monitoring: SessionNotFound HOT 13
- AttributeError: 'NoneType' object has no attribute 'href' HOT 4
- session.login: Failed to get username HOT 4
- role 'Manage Administrator' mandatory for read only API clients HOT 1
- How add Exceptions on Phase-1ID in Engine Endpoints HOT 1
- How change tunnel Mode in PolicyVPN HOT 3
- Search a firewall policy similarly to "Search Rules" function in SMC GUI HOT 1
- Route-Based VPN Creation Error HOT 7
- multiples sessions HOT 2
- engine.routing_monitoring Error HOT 6
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from fp-ngfw-smc-python.