topic Re: ISP Redundancy Not Working When Removing the Cable Physically in Firewall and Security Management

ISP Redundancy Not Working When Removing the Cable Physically

SecurityNed — Mon, 15 May 2023 01:29:29 GMT

Hello!

I would just like to confirm as I can't seem to find any documentation regarding this but is it by design that ISP redundancy does not work when you physically remove a cable instead of performing it via CLI using this command:

fw isp_link <Name of ISP Link in SmartConsole> {up | down}

Removing it physically does not cause the failover to the secondary ISP.

Hoping for your insight on this one.

Re: ISP Redundancy Not Working When Removing the Cable Physically

Blason_R — Mon, 15 May 2023 02:03:54 GMT

Nope - It should work either way. As soon as it stops sending probes to monitored IP addresses configured it would fail over. You will get to know the status through cpstat fw. I am sure there must a misconfiguration.

Re: ISP Redundancy Not Working When Removing the Cable Physically

SecurityNed — Mon, 15 May 2023 02:06:16 GMT

Do I need to configure the ISP monitor on the GAiA side as well? Checking the previous posts regarding ISP redundancy shows that configuration, and I think I missed that one. But I also assumed that it should already be covered by the Link Monitor in the ISP Redundancy part inside SmartConsole.

Re: ISP Redundancy Not Working When Removing the Cable Physically

Blason_R — Mon, 15 May 2023 02:16:02 GMT

No - Not in gaia but in smart console. If you click on ISP redundancy click on every link and then click advanced. You need to mentioned the probing IP addresses. And as I said you can monitor the link state using cpstat fw from #expert mode

Re: ISP Redundancy Not Working When Removing the Cable Physically

Blason_R — Mon, 15 May 2023 02:20:16 GMT

Here are the settings.

Re: ISP Redundancy Not Working When Removing the Cable Physically

SecurityNed — Mon, 15 May 2023 02:21:50 GMT

I have probed them to two different DNS addresses, do I need to add one more different probe for it?

Re: ISP Redundancy Not Working When Removing the Cable Physically

Blason_R — Mon, 15 May 2023 02:23:24 GMT

Can you ping those IP addresses from gateway? GW sends ICMP probe and not DNS. Plus can you give us output for cpstat fw?