Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ADD Report SD-WAN, IPSEC Status, Security Profile #40

Open
2 tasks done
LoicLys opened this issue Jul 28, 2023 · 4 comments
Open
2 tasks done

ADD Report SD-WAN, IPSEC Status, Security Profile #40

LoicLys opened this issue Jul 28, 2023 · 4 comments

Comments

@LoicLys
Copy link

LoicLys commented Jul 28, 2023

Description

Add SD WAN configuration, ipsec status (up or down) and security profile to report

Additional Context

No response

Before submitting

  • I have read the documentation, and referred to the known issues before submitting this change request.
  • I have checked for previously opened & closed issues before submitting this change request.
@alagoutte
Copy link
Collaborator

Yes, it is on the Roadmap

it is possible to get more info about what do you want to see ? (example of CLI config ?)

@alagoutte
Copy link
Collaborator

for security profile, only the security profile or also what rule use this security profile ?

@LoicLys
Copy link
Author

LoicLys commented Aug 1, 2023

yes zone member interfaces and gateway:
config members
edit 1
set interface "wan2"
set zone "virtual-wan-link"
set gateway 192.168.178.1
The health-check

edit "SLABureau"
set server "1.1.1.1" "8.8.8.8"
set detect-mode active
set protocol ping
set interval 500
set probe-timeout 500
set failtime 5
config sla
edit 1
set link-cost-factor latency jitter packet-loss
set latency-threshold 12
set jitter-threshold 5

and Service
config service
edit 4
set name "VOIP"
set mode priority
set dst "Telavox"
set dst-negate disable
set src "port4 address"
set health-check "SLABureau"
set link-cost-factor jitter
set priority-zone "virtual-wan-link"

For Security Profile, only the security profile
The name et the mode (proxy or Flow), the categories are going to be complicated enb CLI it's a number

edit "wifi-default"
set comment "Default configuration for offloading WiFi traffic."
set feature-set proxy

@alagoutte
Copy link
Collaborator

SD-WAN support is added on #59 (for next release)

for IPsec tunnel, it is complicated because no API call for this...

and for Security Profile, i will be coming on next release...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants