- Products
- Learn
- Local User Groups
- Partners
- More
MVP 2026: Submissions
Are Now Open!
What's New in R82.10?
Watch NowOverlap in Security Validation
Help us to understand your needs better
CheckMates Go:
Maestro Madness
Am getting wrong IP address information in fw getifs command. However right ip address showing in ifconfig output.
Firewall is running with R81.10 with JHF94
[Expert@RAPFW01:1]# fw getifs
localhost bond3.355 192.168.196.1 255.255.255.240
localhost bond1.150 192.168.196.17 255.255.255.240
localhost bond2.1355 192.168.196.33 255.255.255.240
[Expert@RAPFW01:1]#
Below is the output of command "ifconfig -a"
bond1.150 Link encap:Ethernet HWaddr 00:1C:7F:A4:FA:72
inet addr:10.244.81.146 Bcast:10.244.81.151 Mask:255.255.255.248
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:77380109 errors:0 dropped:0 overruns:0 frame:0
TX packets:110416393 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:26508484663 (24.6 GiB) TX bytes:106162038630 (98.8 GiB)
bond2.1355 Link encap:Ethernet HWaddr 00:1C:7F:A4:29:FF
inet addr:10.244.81.130 Bcast:10.244.81.135 Mask:255.255.255.248
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1657965458 errors:0 dropped:0 overruns:0 frame:0
TX packets:2623027464 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:435045140029 (405.1 GiB) TX bytes:2760581046444 (2.5 TiB)
bond3.355 Link encap:Ethernet HWaddr 00:1C:7F:A4:2A:01
inet addr:10.244.81.138 Bcast:10.244.81.143 Mask:255.255.255.248
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2493603316 errors:0 dropped:0 overruns:0 frame:0
TX packets:1819294986 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:2817560100000 (2.5 TiB) TX bytes:473126270726 (440.6 GiB)
Please suggest how to fix this issue
It's actually the other way around. 'fw getifs' returns correct information. The real '/sbin/ifconfig' also returns correct information. 'ifconfig' without specifying the path is caught by an alias by default and instead of running ifconfig, it actually runs something different:
[Expert@DallasSA]# which ifconfig
alias ifconfig='/bin/cp-ifconfig.sh'
/bin/cp-ifconfig.sh
This script returns fake information based on the cluster VIPs, which no interface actually owns.
It's actually the other way around. 'fw getifs' returns correct information. The real '/sbin/ifconfig' also returns correct information. 'ifconfig' without specifying the path is caught by an alias by default and instead of running ifconfig, it actually runs something different:
[Expert@DallasSA]# which ifconfig
alias ifconfig='/bin/cp-ifconfig.sh'
/bin/cp-ifconfig.sh
This script returns fake information based on the cluster VIPs, which no interface actually owns.
Is there anyway to get the same IP address in both commands ?
[Expert@RAPFW01:0]# which ifconfig
alias ifconfig='/bin/cp-ifconfig.sh'
/bin/cp-ifconfig.sh
There isn't. If you want the real IP addresses which your interfaces actually have, use 'fw getifs', '/sbin/ifconfig', or '/sbin/ip'. To get the cluster VIPs, use '/bin/cp-ifconfig.sh' (or 'ifconfig', which is an alias to that script) or 'cphaprob -a if'.
VSX mostly hides the real IPs from you, which is why 'ifconfig' is an alias for a command which shows you cluster VIPs instead.
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 11 | |
| 9 | |
| 9 | |
| 8 | |
| 6 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 1 |
Tue 16 Dec 2025 @ 05:00 PM (CET)
Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!Thu 18 Dec 2025 @ 10:00 AM (CET)
Cloud Architect Series - Building a Hybrid Mesh Security Strategy across cloudsTue 16 Dec 2025 @ 05:00 PM (CET)
Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!Thu 18 Dec 2025 @ 10:00 AM (CET)
Cloud Architect Series - Building a Hybrid Mesh Security Strategy across cloudsAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY