topic Re: Check Point stops redistributing routes in BGP in General Topics

Check Point stops redistributing routes in BGP

Hllrdm — Mon, 06 Mar 2023 06:57:11 GMT

We had a problem that Check Point stopped broadcasting marshalls to BGP after a while. What could be the problem? At the moment it helps to change route redistribution repeatedly.

Re: Check Point stops redistributing routes in BGP

Chris_Atkinson — Mon, 06 Mar 2023 07:00:05 GMT

Can you please share some additional information...

Which version / JHF is the gateway, is the issue only when a failover occurs and is graceful restart configured?

Anything else that might be relevant?

Re: Check Point stops redistributing routes in BGP

Hllrdm — Mon, 06 Mar 2023 07:02:55 GMT

We use the R81.10 cluster. The latest JHF.
I misspoke. It helps if we delete the route from Route Redistribution and recreate it. We announce the default route.

Re: Check Point stops redistributing routes in BGP

Chris_Atkinson — Mon, 06 Mar 2023 12:02:42 GMT

Is it being redistributed from another routing protocol (e.g. OSPF) or static?

Re: Check Point stops redistributing routes in BGP

Hllrdm — Mon, 06 Mar 2023 12:04:53 GMT

Redistributions are made from a static route

Re: Check Point stops redistributing routes in BGP

Chris_Atkinson — Mon, 06 Mar 2023 12:27:34 GMT

Do you happen to have the output of the routing table when the issue is present, is the default route seen on the gateway and with what "rank"?

Re: Check Point stops redistributing routes in BGP

the_rock — Mon, 06 Mar 2023 14:47:30 GMT

I had this issue with customer maybe 2 years ago and after troubleshooting it for few hours, we finally decided to reboot the fw and that fixed the problem. It would have been nice to find out the reason in the first place, but since it was really late at night and everyone was tired, we just did not bother : - )

Re: Check Point stops redistributing routes in BGP

Hllrdm — Wed, 15 Mar 2023 06:18:14 GMT

We rebooted the cluster member, but the default route redistribution problem persisted

Re: Check Point stops redistributing routes in BGP

Chris_Atkinson — Wed, 15 Mar 2023 06:19:47 GMT

Did you manage to capture the output suggested above showing the routes/rank?

Re: Check Point stops redistributing routes in BGP

Hllrdm — Wed, 15 Mar 2023 06:24:31 GMT

Check Point publishes its route in BGP, I requested a routing table from the network department when we see a problem and when we don't

Re: Check Point stops redistributing routes in BGP

the_rock — Wed, 15 Mar 2023 12:56:23 GMT

Yes, please get that when you can, because we would need to see the difference.