ISP Redundancy: probe are not probed

BikeMan — Fri, 22 Oct 2021 11:34:46 GMT

Dear all,

I have an issue in one of my cluster. I am using ISP Redundancy on 3000 models running R80.20 with the latest HF installed. The issue is the following:

- config is Primary/Backup

- When Primary is up, tcpdump is showing ICMP packet to and from its probed host (1.1.1.1, I don't probe this one, it is for example) . But tcpdump does not show the traffic for ISP2 (2.2.2.2).

- When Primary is down, it is the opposite: packet are ok for isp2 (2.2.2.2) but nothing for isp1 (1.1.1.1).

Tcpdump is defined with -i "interface", and the right one is used in the command.

Then, ISP1 does not come back to the Active state while ISP2 is up. This was the behavior in R77.30, but it should not be in R80.20.

I have checked on other location, and I have packet on both ISP link for their involved probe.

To be complete, the appliance were first installed with R77.30, upgraded to R80.20.

Didn't found anything in Checkpoint SK.

Is anyone can help ?

Thanks,

Re: ISP Redundancy: probe are not probed

PhoneBoy — Mon, 25 Oct 2021 01:53:09 GMT

Did you apply any JHF to that R80.20?
You may want to get the TAC involved.

topic ISP Redundancy: probe are not probed in Firewall and Security Management

ISP Redundancy: probe are not probed

Re: ISP Redundancy: probe are not probed