topic Identifying failed ISP in case of ISP redundancy in General Topics

Identifying failed ISP in case of ISP redundancy

Blason_R — Fri, 03 Oct 2025 03:14:45 GMT

So, I always had this issue where customer is having a multiple ISP under their ISP redundancy but checkpoint does not have actual way to monitor ro alert if any of the ISP fails. Hence I quickly wrote a bash script and then created a custom SNMP OID whch I am monitoring and flags if any ISP fails

output=$(cpstat fw | grep -E 'Load|Active|Backup' | tr "|" " " | awk '{print $1" "$2}') status=0 while read -r line; do link=$(echo "$line" | awk '{print $1}') # Extract the link name status_val=$(echo "$line" | awk '{print $2}') # Extract the status if [[ "$status_val" != "OK" ]]; then echo "Down $link" status=1 fi done <<< "$output" exit $status

Create a directory on firewall

# mkdir /var/log/snmpmon_script

Store files in those directory

Edit /etc/snmp/userDefinedSettings.conf And add below lines as appropriate

extend .1.2.3.4.5.6.7.8.13 process_monitor /bin/sh /var/log/snmpmon_script/linkMon.sh

change the permission

chmod +x /var/log/snmpmon_script/linkMon.sh

Then restart snmp service

set snmp agent off set snmp agent on save config

Re: Identifying failed ISP in case of ISP redundancy

the_rock — Fri, 03 Oct 2025 04:06:07 GMT

Amazing!

Re: Identifying failed ISP in case of ISP redundancy

Thomas_Eichelbu — Fri, 03 Oct 2025 07:36:18 GMT

Wow cool stuff,
yes right, with onboard monitoring tools its pretty though to get any visibility what ISP is really doing ...
recently i started to phase our ISP redundancy setups since many customer reported "Internet slowness" what ever it means.
but ISP redundancy sends all traffic F2F in SXL which is really not perfect ...

Re: Identifying failed ISP in case of ISP redundancy

the_rock — Fri, 03 Oct 2025 10:26:59 GMT

Will see if I can test this properly in the lab.

Andy

Re: Identifying failed ISP in case of ISP redundancy

Blason_R — Fri, 03 Oct 2025 11:48:05 GMT

200% This will work since I have 30 clusters are now being managed and monitored smoothly for any link failure 😉

Re: Identifying failed ISP in case of ISP redundancy

the_rock — Fri, 03 Oct 2025 11:59:59 GMT

I like the level of sureness, if thats even a word 🙂

Best,

Andy