topic Re: Script for NATed Network ISP Redundancy automation in API / CLI Discussion

Script for NATed Network ISP Redundancy automation

AntonMakarychev — Fri, 01 Dec 2017 13:18:20 GMT

Hello everyone,

We have a checkpoint 5400 appliance and a management server R80.10 version.

We have two ISP links connected. One IP for ISP1 - X.X.X.X, for ISP2 - Y.Y.Y.Y. ISP1 is the main provider.

All internal networks except two are hidden behind X.X.X.X. But two networks are nated behind X1.X1.X1.X1 ip.

When we switch on the second provider ISP1, networks behind X1.X1.X1.X1 lose connectivity.

So the question: Is it possible to make an automatic script using CheckPoint API that in case of ISP switching it disables NAT rules of networks behind X1.X1.X1.X1? And when we get back to ISP1 it enables NAT rules again?

Maybe you could advice more accurate solution.

Re: Script for NATed Network ISP Redundancy automation

Gaurav_Pandya — Mon, 04 Dec 2017 17:49:33 GMT

Hi,

You can refer sk25152 in which it is mentioned that how to use Static/Hide NAT when ISP Redundancy is configured.

Re: Script for NATed Network ISP Redundancy automation

AntonMakarychev — Tue, 05 Dec 2017 10:28:31 GMT

Hello,

I read this article. But it is about one host static NAT. I need two networks NAT configuration.

In this case, It's not applicable.