topic Re: change of wan ip through cli in Firewall and Security Management

change of wan ip through cli

johanswe — Wed, 11 Jun 2025 21:18:08 GMT

Hi!

I manage a 1575 gateway and feel abit lost when it comes to the cli.

I would like to change the ip of the wan interface also mapped/bound to internet.

how do I do this from the cli?

in the gaia gui I am allowed to simply replace the ip(fortunately the new ip is still in the same Subnet as the old)

Simply doing a set cmd isnt working. So I assume there is more to be done and I am clueless.. deleting doesnt work either.

best regards

Re: change of wan ip through cli

PhoneBoy — Wed, 11 Jun 2025 22:16:25 GMT

Relevant documentation: https://sc1.checkpoint.com/documents/SMB_R81.10.X/CLI/EN/Content/Topics/set-interface-wan.htm?tocpath=Configuring%20Interfaces%7CConfiguring%20the%20WAN%20Interface%7C_____3
Please provide the exact commands you tried with the exact results received.
Please also provide the firmware version/build you are using.

Re: change of wan ip through cli

the_rock — Wed, 11 Jun 2025 22:34:07 GMT

clish -> set interface WAN (or whatever name it is) ipv4-address x.x.x.x mask-length xx default-gw y.y.y.y

Andy

Re: change of wan ip through cli

johanswe — Thu, 12 Jun 2025 20:59:37 GMT

my-fw1> set interface-type WAN ipv4-address 10.2.3.38 subnet-mask 255.255.255.240 default-gw 10.2.3.33
That one worked!! Thank you!

Not sure why the WAN is of an "interface-type", but sure I can read up on the differences 🙂

Now another firewall(my lab) has the "internet" set to DMZ port of the firewall but then it does not work to change into something within the same subnet.(changing ip from 10.2.3.37)
set interface-type DMZ ipv4-address 10.2.3.38 subnet-mask 255.255.255.240 default-gw 10.2.3.33
Could not set internet-connection ipv4-address: IP address is in the subnet of an existing network

So DMZ and WAN is not same type of connection that I am aware of, but fail to understand the logic to why I cannot to the same change?

What started all this was that I wanted to write a script that falls back into configuring the old ip if not ... criteria is set or working. Also everytime I have to resort into the cli I just get confused being used to other cli's.

So I posted the question from the phone in pure desperation 😄 Thanks Guys!

Re: change of wan ip through cli

the_rock — Thu, 12 Jun 2025 21:45:42 GMT

Glad we can help!