topic Re: fw getifs showing wrong ip address information VSX mode in General Topics

fw getifs showing wrong ip address information VSX mode

jibin_thomas — Mon, 28 Aug 2023 11:00:24 GMT

Am getting wrong IP address information in fw getifs command. However right ip address showing in ifconfig output.

Firewall is running with R81.10 with JHF94

[Expert@RAPFW01:1]# fw getifs
localhost bond3.355 192.168.196.1 255.255.255.240
localhost bond1.150 192.168.196.17 255.255.255.240
localhost bond2.1355 192.168.196.33 255.255.255.240
[Expert@RAPFW01:1]#

Below is the output of command "ifconfig -a"

bond1.150 Link encap:Ethernet HWaddr 00:1C:7F:A4:FA:72
inet addr:10.244.81.146 Bcast:10.244.81.151 Mask:255.255.255.248
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:77380109 errors:0 dropped:0 overruns:0 frame:0
TX packets:110416393 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:26508484663 (24.6 GiB) TX bytes:106162038630 (98.8 GiB)

bond2.1355 Link encap:Ethernet HWaddr 00:1C:7F:A4:29:FF
inet addr:10.244.81.130 Bcast:10.244.81.135 Mask:255.255.255.248
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1657965458 errors:0 dropped:0 overruns:0 frame:0
TX packets:2623027464 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:435045140029 (405.1 GiB) TX bytes:2760581046444 (2.5 TiB)

bond3.355 Link encap:Ethernet HWaddr 00:1C:7F:A4:2A:01
inet addr:10.244.81.138 Bcast:10.244.81.143 Mask:255.255.255.248
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2493603316 errors:0 dropped:0 overruns:0 frame:0
TX packets:1819294986 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:2817560100000 (2.5 TiB) TX bytes:473126270726 (440.6 GiB)

Please suggest how to fix this issue

Re: fw getifs showing wrong ip address information VSX mode

Bob_Zimmerman — Mon, 28 Aug 2023 13:42:14 GMT

It's actually the other way around. 'fw getifs' returns correct information. The real '/sbin/ifconfig' also returns correct information. 'ifconfig' without specifying the path is caught by an alias by default and instead of running ifconfig, it actually runs something different:

[Expert@DallasSA]# which ifconfig alias ifconfig='/bin/cp-ifconfig.sh' /bin/cp-ifconfig.sh

This script returns fake information based on the cluster VIPs, which no interface actually owns.

Re: fw getifs showing wrong ip address information VSX mode

jibin_thomas — Mon, 28 Aug 2023 13:51:58 GMT

Is there anyway to get the same IP address in both commands ?

[Expert@RAPFW01:0]# which ifconfig
alias ifconfig='/bin/cp-ifconfig.sh'
/bin/cp-ifconfig.sh

Re: fw getifs showing wrong ip address information VSX mode

Bob_Zimmerman — Mon, 28 Aug 2023 18:10:48 GMT

There isn't. If you want the real IP addresses which your interfaces actually have, use 'fw getifs', '/sbin/ifconfig', or '/sbin/ip'. To get the cluster VIPs, use '/bin/cp-ifconfig.sh' (or 'ifconfig', which is an alias to that script) or 'cphaprob -a if'.

VSX mostly hides the real IPs from you, which is why 'ifconfig' is an alias for a command which shows you cluster VIPs instead.