topic Re: FW is not switching to secondary static route for ISP in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/FW-is-not-switching-to-secondary-static-route-for-ISP/m-p/28103#M2215 <HTML><HEAD></HEAD><BODY><P>Unfortunately, this doesn't appear to be functionality we have currently (for a given static route).</P></BODY></HTML> Thu, 20 Sep 2018 03:34:55 GMT PhoneBoy 2018-09-20T03:34:55Z FW is not switching to secondary static route for ISP https://community.checkpoint.com/t5/Firewall-and-Security-Management/FW-is-not-switching-to-secondary-static-route-for-ISP/m-p/28100#M2212 <HTML><HEAD></HEAD><BODY><P><IMG __jive_id="70746" alt="IPv4 Static Route" class="image-1 jive-image j-img-original" src="https://community.checkpoint.com/legacyfs/online/checkpoint/70746_RemoteSite-FW-Route.JPG" /></P><P>We have a remote site that we're adding a secondary ISP. We use static routing and we're having issues with the FW switching to the alternate route because the next hop is always available. Is there something like Cisco uses IP SLA tracking?</P><P></P><P>We want to monitor a certain IP and if it is not available switch to the secondary route. That would only apply to this specific network and not our ISP at our main site because I don't think&nbsp;<SPAN style="color: #000000; background-color: #ffffff; font-size: 14px;">sk102848 applies.</SPAN></P><P></P><P><A class="link-titled" href="https://www.cisco.com/c/en/us/support/docs/ip/ip-routing/200785-ISP-Failover-with-default-routes-using-I.html" title="https://www.cisco.com/c/en/us/support/docs/ip/ip-routing/200785-ISP-Failover-with-default-routes-using-I.html">ISP Failover with Default Routes using IP SLA Tracking - Cisco</A>&nbsp;</P><P><A class="link-titled" href="https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.SearchResultMainAction&amp;eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk102848" title="https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.SearchResultMainAction&amp;eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk102848">How to configure ISP Redundancy Link to fail over only when all configured hosts are not answering to pings</A>&nbsp;</P></BODY></HTML> Wed, 19 Sep 2018 15:39:03 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/FW-is-not-switching-to-secondary-static-route-for-ISP/m-p/28100#M2212 Noa_Moe 2018-09-19T15:39:03Z Re: FW is not switching to secondary static route for ISP https://community.checkpoint.com/t5/Firewall-and-Security-Management/FW-is-not-switching-to-secondary-static-route-for-ISP/m-p/28101#M2213 <HTML><HEAD></HEAD><BODY><P>The feature you want to configure is ISP Redundancy.</P><P>Start with the initial suggestions in this thread:&nbsp;<A href="https://community.checkpoint.com/message/25189-isp-redundancy-2-default-route-pointing-to-different-isp" target="_blank">https://community.checkpoint.com/message/25189-isp-redundancy-2-default-route-pointing-to-different-isp</A>&nbsp;</P></BODY></HTML> Fri, 21 Jun 2019 09:15:22 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/FW-is-not-switching-to-secondary-static-route-for-ISP/m-p/28101#M2213 PhoneBoy 2019-06-21T09:15:22Z Re: FW is not switching to secondary static route for ISP https://community.checkpoint.com/t5/Firewall-and-Security-Management/FW-is-not-switching-to-secondary-static-route-for-ISP/m-p/28102#M2214 <HTML><HEAD></HEAD><BODY><P>I have been reading those but I'm trying to do this for a specific&nbsp;network and not the default route.<BR /><BR />Network x.x.133.64/27 I want to route to the gateway x.x.129.129 normally and switch to the secondary x.x.133.1 path if it is down. Both hops are&nbsp;connected to&nbsp;the local network going to different routers.</P><P></P><P>I need a monitor on the distant end to make it switch over if pings are dropped on the distant end interface. Just using the next hop hits local routers and I need the status of the distant end ISP interface.</P></BODY></HTML> Wed, 19 Sep 2018 21:37:14 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/FW-is-not-switching-to-secondary-static-route-for-ISP/m-p/28102#M2214 Noa_Moe 2018-09-19T21:37:14Z Re: FW is not switching to secondary static route for ISP https://community.checkpoint.com/t5/Firewall-and-Security-Management/FW-is-not-switching-to-secondary-static-route-for-ISP/m-p/28103#M2215 <HTML><HEAD></HEAD><BODY><P>Unfortunately, this doesn't appear to be functionality we have currently (for a given static route).</P></BODY></HTML> Thu, 20 Sep 2018 03:34:55 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/FW-is-not-switching-to-secondary-static-route-for-ISP/m-p/28103#M2215 PhoneBoy 2018-09-20T03:34:55Z Re: FW is not switching to secondary static route for ISP https://community.checkpoint.com/t5/Firewall-and-Security-Management/FW-is-not-switching-to-secondary-static-route-for-ISP/m-p/28104#M2216 <HTML><HEAD></HEAD><BODY><P>Thanks for verifying that for me. We'll look for another solution. </P></BODY></HTML> Thu, 20 Sep 2018 21:15:58 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/FW-is-not-switching-to-secondary-static-route-for-ISP/m-p/28104#M2216 Noa_Moe 2018-09-20T21:15:58Z