<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Ping Gateway Script in Firewall and Security Management</title>
    <link>https://community.checkpoint.com/t5/Firewall-and-Security-Management/Ping-Gateway-Script/m-p/39178#M3325</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Whenever we do any work on a gateway we have to do various health checks especially when rebooting a gateway.&amp;nbsp; &amp;nbsp;One simple check that is important is pinging the next hop gateways.&amp;nbsp; We do this before and after a change to make sure that something didn't break such as an interface going into error disabled on a switch...which tends to happen.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;This is a one off script that determines all of the next hop gateway addresses based on the routing table (via ip route) and attempts to ping them.&amp;nbsp; If it fails to get a response it will check the ARP table to see if there is an ARP entry.&amp;nbsp; It will give the process about 20 seconds per and then kill the attempt so the process doesn't take forever.&amp;nbsp;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;We use this script to capture results nightly as well so we know how it is supposed to look on a regular basis.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;#!/bin/bash&lt;BR /&gt;#&lt;BR /&gt;# [Ivan Moore]&lt;BR /&gt;#&lt;BR /&gt;# Determine all next hop gateways from routing table and ping&lt;BR /&gt;# to make sure we can reach them.&amp;nbsp; If no ping response is received&lt;BR /&gt;# check ARP table to see if we have L2 just in case the device is&lt;BR /&gt;# not allowed to respond.&lt;BR /&gt;#&lt;BR /&gt;# 11/19/2015&lt;BR /&gt;&lt;BR /&gt;VERSION=1.0.1&lt;BR /&gt;&lt;BR /&gt;# Program name: ping script to ping next-hop addresses&lt;BR /&gt;date&lt;BR /&gt;ip route | awk '/via/ { print $3 }' | sort -u | while read output&lt;BR /&gt;do&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; ping -c 1 -w 1 "$output" &amp;gt; /dev/null&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; if [ $? -eq 0 ]; then&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; echo "node $output is up"&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; else&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; echo " "&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; echo "node $output is down"&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; echo "Checking for an ARP entry in case PING is disabled:"&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; arp -a $output &amp;amp;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; TASK_PID=$!&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; sleep 20&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; kill $TASK_PID &amp;gt;/dev/null 2&amp;gt;&amp;amp;1&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; echo " "&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; fi&lt;BR /&gt;done&lt;BR /&gt;&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Fri, 16 Mar 2018 17:14:52 GMT</pubDate>
    <dc:creator>Ivan_Moore</dc:creator>
    <dc:date>2018-03-16T17:14:52Z</dc:date>
    <item>
      <title>Ping Gateway Script</title>
      <link>https://community.checkpoint.com/t5/Firewall-and-Security-Management/Ping-Gateway-Script/m-p/39178#M3325</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Whenever we do any work on a gateway we have to do various health checks especially when rebooting a gateway.&amp;nbsp; &amp;nbsp;One simple check that is important is pinging the next hop gateways.&amp;nbsp; We do this before and after a change to make sure that something didn't break such as an interface going into error disabled on a switch...which tends to happen.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;This is a one off script that determines all of the next hop gateway addresses based on the routing table (via ip route) and attempts to ping them.&amp;nbsp; If it fails to get a response it will check the ARP table to see if there is an ARP entry.&amp;nbsp; It will give the process about 20 seconds per and then kill the attempt so the process doesn't take forever.&amp;nbsp;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;We use this script to capture results nightly as well so we know how it is supposed to look on a regular basis.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;#!/bin/bash&lt;BR /&gt;#&lt;BR /&gt;# [Ivan Moore]&lt;BR /&gt;#&lt;BR /&gt;# Determine all next hop gateways from routing table and ping&lt;BR /&gt;# to make sure we can reach them.&amp;nbsp; If no ping response is received&lt;BR /&gt;# check ARP table to see if we have L2 just in case the device is&lt;BR /&gt;# not allowed to respond.&lt;BR /&gt;#&lt;BR /&gt;# 11/19/2015&lt;BR /&gt;&lt;BR /&gt;VERSION=1.0.1&lt;BR /&gt;&lt;BR /&gt;# Program name: ping script to ping next-hop addresses&lt;BR /&gt;date&lt;BR /&gt;ip route | awk '/via/ { print $3 }' | sort -u | while read output&lt;BR /&gt;do&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; ping -c 1 -w 1 "$output" &amp;gt; /dev/null&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; if [ $? -eq 0 ]; then&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; echo "node $output is up"&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; else&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; echo " "&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; echo "node $output is down"&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; echo "Checking for an ARP entry in case PING is disabled:"&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; arp -a $output &amp;amp;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; TASK_PID=$!&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; sleep 20&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; kill $TASK_PID &amp;gt;/dev/null 2&amp;gt;&amp;amp;1&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; echo " "&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; fi&lt;BR /&gt;done&lt;BR /&gt;&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 16 Mar 2018 17:14:52 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Firewall-and-Security-Management/Ping-Gateway-Script/m-p/39178#M3325</guid>
      <dc:creator>Ivan_Moore</dc:creator>
      <dc:date>2018-03-16T17:14:52Z</dc:date>
    </item>
  </channel>
</rss>

