https://community.checkpoint.com/t5/Firewall-and-Security-Management/Active-cluster-node-not-switching-back-to-primary-ISP-even/m-p/227783#M43805 <P>Good morning!</P> <P>Two-node active/standby cluster running R81.20 Take 53.</P> <P>ISP redundancy enabled&nbsp; - configured and working properly (until yesterday&nbsp; <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span> )</P> <P>Advanced tab in ISP redundancy set to ping main ISP's gateway:</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="ISP Redundancy" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/27768iF43A5A08866D1F1B/image-size/medium?v=v2&amp;px=400" role="button" title="Screenshot 2024-09-24 104329.jpg" alt="ISP Redundancy" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">ISP Redundancy</span></span></P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Advanced tab - monitoring Verizon gateway" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/27769i344C026B1CE45EFB/image-size/medium?v=v2&amp;px=400" role="button" title="Screenshot 2024-09-24 104513.jpg" alt="Advanced tab - monitoring Verizon gateway" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">Advanced tab - monitoring Verizon gateway</span></span></P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Standyby node" style="width: 386px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/27770i3566E7A1982925B0/image-size/medium?v=v2&amp;px=400" role="button" title="Screenshot 2024-09-24 104652.jpg" alt="Standyby node" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">Standyby node</span></span></P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Active node" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/27773i6F201C1E29DFBC3B/image-size/medium?v=v2&amp;px=400" role="button" title="Screenshot 2024-09-24 104844.jpg" alt="Active node" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">Active node</span></span></P> <P>As you can see - my Active node still thinks my main ISP link is down - even though it's not.&nbsp; I can ping the ISP gateway from both nodes.</P> <P>Sync issue?&nbsp; How do I resolve?</P> <P>&nbsp;</P> <P>Thank you all!</P> <P>&nbsp;</P> Tue, 24 Sep 2024 16:35:34 GMT Joe_Kanaszka 2024-09-24T16:35:34Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Active-cluster-node-not-switching-back-to-primary-ISP-even/m-p/227783#M43805 <P>Good morning!</P> <P>Two-node active/standby cluster running R81.20 Take 53.</P> <P>ISP redundancy enabled&nbsp; - configured and working properly (until yesterday&nbsp; <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span> )</P> <P>Advanced tab in ISP redundancy set to ping main ISP's gateway:</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="ISP Redundancy" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/27768iF43A5A08866D1F1B/image-size/medium?v=v2&amp;px=400" role="button" title="Screenshot 2024-09-24 104329.jpg" alt="ISP Redundancy" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">ISP Redundancy</span></span></P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Advanced tab - monitoring Verizon gateway" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/27769i344C026B1CE45EFB/image-size/medium?v=v2&amp;px=400" role="button" title="Screenshot 2024-09-24 104513.jpg" alt="Advanced tab - monitoring Verizon gateway" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">Advanced tab - monitoring Verizon gateway</span></span></P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Standyby node" style="width: 386px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/27770i3566E7A1982925B0/image-size/medium?v=v2&amp;px=400" role="button" title="Screenshot 2024-09-24 104652.jpg" alt="Standyby node" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">Standyby node</span></span></P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Active node" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/27773i6F201C1E29DFBC3B/image-size/medium?v=v2&amp;px=400" role="button" title="Screenshot 2024-09-24 104844.jpg" alt="Active node" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">Active node</span></span></P> <P>As you can see - my Active node still thinks my main ISP link is down - even though it's not.&nbsp; I can ping the ISP gateway from both nodes.</P> <P>Sync issue?&nbsp; How do I resolve?</P> <P>&nbsp;</P> <P>Thank you all!</P> <P>&nbsp;</P> Tue, 24 Sep 2024 16:35:34 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Active-cluster-node-not-switching-back-to-primary-ISP-even/m-p/227783#M43805 Joe_Kanaszka 2024-09-24T16:35:34Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Active-cluster-node-not-switching-back-to-primary-ISP-even/m-p/227803#M43806 <P>Confirm with packet capture if the gateway is trying to probe the IP on the correct interface.</P> <P>Also reason why you can ping it is maybe you probe the ISP-1 host via ISP-2</P> <P>Only capture can show you if it is routed correctly.&nbsp;</P> <P>After that check&nbsp;<A href="https://support.checkpoint.com/results/sk/sk65341" target="_blank">https://support.checkpoint.com/results/sk/sk65341</A></P> Tue, 24 Sep 2024 17:47:52 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Active-cluster-node-not-switching-back-to-primary-ISP-even/m-p/227803#M43806 Lesley 2024-09-24T17:47:52Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Active-cluster-node-not-switching-back-to-primary-ISP-even/m-p/227816#M43807 <P>This was the answer.&nbsp; Thank you Lesley!</P> Tue, 24 Sep 2024 20:11:12 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Active-cluster-node-not-switching-back-to-primary-ISP-even/m-p/227816#M43807 Joe_Kanaszka 2024-09-24T20:11:12Z