topic Re: detect duplicate IPs in Firewall and Security Management

detect duplicate IPs

Wolfgang — Tue, 25 Jun 2024 13:08:11 GMT

Following the documentation Detection of IP Address Conflicts you can monitor duplicate IP addresses. I tried but the option does not exist.

FW> show ip-conflicts-monitor
CLINFR0329 Invalid command:'show ip-conflicts-monitor'.

FW> set ip-conflicts-monitor on
CLINFR0329 Invalid command:'set ip-conflicts-monitor on'.

FW> show ip....
ip-reachability-detection - Monitor remote IPs for reachability with BFD or Ping
iphelper - Show IP Broadcast Helper status and configuration
ipv6 - Show IPv6 configuration and state
ipv6-state - IPv6 status

Ther's no configuration for "ip-conflicts-monitor" available 😞 Anyway to enable this?

Re: detect duplicate IPs

the_rock — Tue, 25 Jun 2024 13:14:23 GMT

It seems to work.

Andy

Check-Point-R82> lock database override
Check-Point-R82> set ip-con
Check-Point-R82> set ip-conflicts-monitor
interface - Configure the interfaces for IP conflict monitoring
state - Configure the state of the IP conflict monitoring
Check-Point-R82> set ip-conflicts-monitor state

on off
Check-Point-R82> set ip-conflicts-monitor state on
Check-Point-R82> set ip-conflicts-monitor
interface - Configure the interfaces for IP conflict monitoring
state - Configure the state of the IP conflict monitoring
Check-Point-R82> set ip-conflicts-monitor i
Check-Point-R82> set ip-conflicts-monitor interface

eth0 all
Check-Point-R82> set ip-conflicts-monitor interface all
Check-Point-R82> save config
Check-Point-R82> show ip-co
Check-Point-R82> show ip-conflicts-monitor
CLINFR0339 Incomplete command.
Check-Point-R82> show ip-conflicts-monitor
interfaces - Show interfaces, on which the IP conflict monitoring is enabled
state - Show the state of the IP conflict monitoring
Check-Point-R82> show ip-conflicts-monitor in
Check-Point-R82> show ip-conflicts-monitor interfaces
Monitored Interfaces: all
Check-Point-R82> show ip-conflicts-monitor
interfaces - Show interfaces, on which the IP conflict monitoring is enabled
state - Show the state of the IP conflict monitoring
Check-Point-R82> show ip-conflicts-monitor stat
Check-Point-R82> show ip-conflicts-monitor state
IP conflicts monitoring Enabled
Check-Point-R82>

Re: detect duplicate IPs

Wolfgang — Tue, 25 Jun 2024 13:33:03 GMT

mmmh R82 ?

Re: detect duplicate IPs

the_rock — Tue, 25 Jun 2024 13:34:28 GMT

lol...dont let the name fool ya 🙂

Plan was to install R82 on it in Azure, but turns out upgrade package is not compatible yet, so that was done on R81.20

Andy

Re: detect duplicate IPs

the_rock — Tue, 25 Jun 2024 14:33:50 GMT

Btw, just tested on R81.10 and R81.20 in production, commands worked exactly the same how I posted them in my first response.

Andy

Re: detect duplicate IPs

Timothy_Hall — Tue, 25 Jun 2024 15:46:13 GMT

As mentioned below this capability was added in R81, but the underlying arpwatch command existed in the Gaia OS prior to that but its use was not supported.

https://community.checkpoint.com/t5/Member-Exclusive-Content/Be-your-own-TAC-Advanced-Gateway-Troubleshooting-Commands/m-p/208378

Re: detect duplicate IPs

Wolfgang — Wed, 26 Jun 2024 05:03:54 GMT

Setting exist on another system. Looks like Maestro or VSX does not have this capability. At the moment I'v only Maestro with VSX available for checking. Maybe someone can confirm it's available without VSX.