topic Re: ISP Redundancy Script in ClusterXL in Firewall and Security Management

ISP Redundancy Script in ClusterXL

Luis_Esteban — Mon, 31 Jan 2022 16:46:25 GMT

Hi,

I am going to configure ISP redundancy in our R80.40 Cluster, Primary/Backup mode.

I have some doubts about the ISP Redundancy Script. The administration guide says ‘if one of the ISP links is the connection to a backup ISP, configure the ISP Redundancy Script’. However, when I check the section about the ISP redundancy script, it says ‘Warning - We do not recommend that you make any changes in this script.’ It would be ideal that the Primary ISP link would be the active one when becomes available again.

Any ideas about what should I do? If I need to change the ISP redundancy script, what changes are needed?

I have another question. When the ISP redundancy is set, and the next hop is configured for both links, what is the effect of ‘IPv4 Static Routes’ for the default gateway in Gaia? Should I add another default route for the ISP backup link on there?

Thanks in advance

Re: ISP Redundancy Script in ClusterXL

the_rock — Mon, 31 Jan 2022 17:23:34 GMT

I cant speak for anyone else, but I can tell you I configured this for few customers and we never had to run any script, or change anything. Just followed below doc and worked fine. Just make sure you indicate next hop IP as IP of device leading to your ISP and also check option to apply to VPN settings at the bottom.

https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_ClusterXL_AdminGuide/html_frameset.htm?topic=documents/R80.30/WebAdminGuides/EN/CP_R80.30_ClusterXL_AdminGuide/150990

Re: ISP Redundancy Script in ClusterXL

Yigal_Alexander — Mon, 31 Jan 2022 19:30:41 GMT

Hi

No need to modify the script itself.
As for the static routes already configured - there is no need to configure the additional route, this is exactly what the script does when invoked upon ISP failover.