Print Download PDF Send Feedback

Previous

Next

ModifyROBOTopology VPN1Edge

This command modifies the VPN Domain configuration for a selected UTM-1 Edge device.

Usage

LSMcli [-d] <server> <user> <pswd> ModifyROBOTopology VPN1Edge <RoboName> and at least one of: [-VPNDomain=<not_defined|external_ip_only|topology|automatic |manual>]

Parameters

ModifyROBOTopology UTM-1 Edge Parameters

Parameter

Description

server

Name/IP address of the Security Management Server or Domain Management Server

user

User name of standard Check Point authentication method

pswd

Password of standard Check Point authentication method

RoboName

Name of the SmartLSM UTM-1 Edge device

VPNDomain

Flag to configure the VPN Domain topology. The options are: not_defined, external_ip_only, topology, and manual.

  • not_defined: Equivalent to the Not Defined option in the Topology tab of a SmartLSM Security Gateway in the SmartProvisioning GUI (or in the ShowROBOTopology output).
  • external_ip_only: Equivalent to Only the external interface
  • topology: Equivalent to All IP Addresses behind the Gateway based on Topology information
  • automatic: The VPN domain of the UTM-1 Edge device consists of all the IP addresses configured locally on the UTM-1 Edge device, regardless of the interface configuration of the Edge object in SmartConsole. Selecting this option requires:
    • Manual definition of VTIs on the Edge and CO gateway, so that the CO learns the VPN domain of the UTM-1 Edge device.
    • OSPF feature of the CO gateway to dynamically learn the VPN domain of the UTM-1 Edge device.
  • manual: Equivalent to Manually defined

Example

LSMcli mySrvr name pass ModifyROBOTopology VPN1Edge MyRobo -VPNDomain=manual