- Products
- Learn
- Local User Groups
- Partners
-
More
Celebrate the New Year
With CheckMates!
Value of Security
Vendor Self-Awareness
Join Us for CPX 360
23-24 February 2021
Important certificate update to CloudGuard Controller, CME,
and Azure HA Security Gateways
How to Remediate Endpoint & VPN
Issues (in versions E81.10 or earlier)
Mobile Security
Buyer's Guide Out Now
Important! R80 and R80.10
End Of Support around the corner (May 2021)
Hello everyone,
I am unable to see the speed of WAN interface in 1400 appliances. I tried this:
# clish -c 'show interface WAN'
Failed to find the requested interface
# ethtool WAN
Settings for WAN:
No data available
# cat /sys/class/net/WAN/speed
cat: read error: Invalid argument
SNMP using IF-MIB::ifspeed, returns 0.
All these commands work for DMZ, which is also set for internet.
How can I check the WAN interface speed?
At least on my 1490:
[Expert@GW1490]# ethtool eth2
Settings for eth2:
Supported ports: [ ]
Supported link modes: Not reported
Supported pause frame use: No
Supports auto-negotiation: No
Advertised link modes: Not reported
Advertised pause frame use: No
Advertised auto-negotiation: No
Speed: 1000Mb/s
Duplex: Full
Port: Twisted Pair
PHYAD: 0
Transceiver: internal
Auto-negotiation: off
MDI-X: Unknown
Supports Wake-on: umb
Wake-on: d
Current message level: 0x00000007 (7)
drv probe link
Link detected: yes
Hi Pedro,
if you run "show route" , you will see you exact interfaces as directly connected. There is written as WAN interface
But in the output of "show interfaces" command you will see you custom named interfaces. you can check ip addresses to specify which one is wan interface. Route table will show the original name. You can check also internet-connection interfaces name.
Hello Huseyin,
Thank you for your answer.
I tried that, but link-speed shows as empty:
# clish -c 'show interface SITELBRA' | grep -i speed
link-speed:
Then I tried:
# clish -c 'show internet-connections' | grep -i speed
port-speed: 115200
dmz-link-speed: 10/half
wan-link-speed: 10/half
link-speed: 10/half
port-speed: 115200
dmz-link-speed: 10/half
wan-link-speed: 10/half
link-speed: 10/half
But:
# ethtool DMZ | grep -i speed
Speed: 100Mb/s
# cat /sys/class/net/DMZ/speed
100
So why do I see dmz-link-speed: 10/half and Speed: 100Mb/s?
I am sure it isn't negociated at 10Mbps because of high throughput in the DMZ interface. 100Mbps must be correct.
I am having issues with speed in the WAN interface, but if the "dmz-link-speed: 10/half" information is incorrect, how can I trust that the "wan-link-speed: 10/half" information is correct?
PS: I don't have access to the ISP router, so I can't check speed in it, but the model supports 1Gbps.
At least on my 1490:
[Expert@GW1490]# ethtool eth2
Settings for eth2:
Supported ports: [ ]
Supported link modes: Not reported
Supported pause frame use: No
Supports auto-negotiation: No
Advertised link modes: Not reported
Advertised pause frame use: No
Advertised auto-negotiation: No
Speed: 1000Mb/s
Duplex: Full
Port: Twisted Pair
PHYAD: 0
Transceiver: internal
Auto-negotiation: off
MDI-X: Unknown
Supports Wake-on: umb
Wake-on: d
Current message level: 0x00000007 (7)
drv probe link
Link detected: yes
Thanks Dameon! That seems to be correct for 1470 and 1490.
For 1430 and 1450, "ethtool WAN" will work.
ethtool works even on 7xx and 11xx appliances in addition.
About CheckMates
Learn Check Point
Advanced Learning
WELCOME TO THE FUTURE OF CYBER SECURITY