Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Wolfgang
Authority
Authority

detect duplicate IPs

Following the documentation Detection of IP Address Conflicts you can monitor duplicate IP addresses. I tried but the option does not exist.

FW> show ip-conflicts-monitor
CLINFR0329 Invalid command:'show ip-conflicts-monitor'.

FW> set ip-conflicts-monitor on
CLINFR0329 Invalid command:'set ip-conflicts-monitor on'.


FW> show ip....
ip-reachability-detection - Monitor remote IPs for reachability with BFD or Ping
iphelper - Show IP Broadcast Helper status and configuration
ipv6 - Show IPv6 configuration and state
ipv6-state - IPv6 status

Ther's no configuration for "ip-conflicts-monitor" available 😞 Anyway to enable this?

 

0 Kudos
6 Replies
the_rock
Legend
Legend

It seems to work.

Andy

Check-Point-R82> lock database override
Check-Point-R82> set ip-con
Check-Point-R82> set ip-conflicts-monitor
interface - Configure the interfaces for IP conflict monitoring
state - Configure the state of the IP conflict monitoring
Check-Point-R82> set ip-conflicts-monitor state

on off
Check-Point-R82> set ip-conflicts-monitor state on
Check-Point-R82> set ip-conflicts-monitor
interface - Configure the interfaces for IP conflict monitoring
state - Configure the state of the IP conflict monitoring
Check-Point-R82> set ip-conflicts-monitor i
Check-Point-R82> set ip-conflicts-monitor interface

eth0 all
Check-Point-R82> set ip-conflicts-monitor interface all
Check-Point-R82> save config
Check-Point-R82> show ip-co
Check-Point-R82> show ip-conflicts-monitor
CLINFR0339 Incomplete command.
Check-Point-R82> show ip-conflicts-monitor
interfaces - Show interfaces, on which the IP conflict monitoring is enabled
state - Show the state of the IP conflict monitoring
Check-Point-R82> show ip-conflicts-monitor in
Check-Point-R82> show ip-conflicts-monitor interfaces
Monitored Interfaces: all
Check-Point-R82> show ip-conflicts-monitor
interfaces - Show interfaces, on which the IP conflict monitoring is enabled
state - Show the state of the IP conflict monitoring
Check-Point-R82> show ip-conflicts-monitor stat
Check-Point-R82> show ip-conflicts-monitor state
IP conflicts monitoring Enabled
Check-Point-R82>

0 Kudos
Wolfgang
Authority
Authority

mmmh R82 ?

0 Kudos
the_rock
Legend
Legend

lol...dont let the name fool ya 🙂

Plan was to install R82 on it in Azure, but turns out upgrade package is not compatible yet, so that was done on R81.20

Andy

0 Kudos
the_rock
Legend
Legend

Btw, just tested on R81.10 and R81.20 in production, commands worked exactly the same how I posted them in my first response.

Andy

0 Kudos
Wolfgang
Authority
Authority

Setting exist on another system. Looks like Maestro or VSX does not have this capability. At the moment I'v only Maestro with VSX available for checking. Maybe someone can confirm it's available without VSX.

0 Kudos
Timothy_Hall
Legend Legend
Legend

As mentioned below this capability was added in R81, but the underlying arpwatch command existed in the Gaia OS prior to that but its use was not supported.

https://community.checkpoint.com/t5/Member-Exclusive-Content/Be-your-own-TAC-Advanced-Gateway-Troubl...

 

Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events