BGP Routes are showing as inactive on CheckPoint

[Blason_R]

Hi Team,

My scenario is as follows and the issue I faced is when the bgp routes are checked on firewall one of the path show as Inactive. I tired debugging with trace options but I unable to crack through. Am I missing something? may be another pair of eyes can help me here?

Here are the route and BGP status on firewall

MUM-FW01> show bgp peers

Flags: R - Peer restarted, W - Waiting for End-Of-RIB from Peer

PeerID AS Routes ActRts State InUpds OutUpds Uptime
192.168.42.60 65001 2 0 Established 2 1 00:18:15
192.168.20.60 65002 2 1 Established 2 1 00:17:43

And here are the route received which shows routes received from 192.168.42.60 as inactive

MUM-FW01> show route all
Codes: C - Connected, S - Static, R - RIP, B - BGP (D - Default),
       O - OSPF IntraArea (IA - InterArea, E - External, N - NSSA),
       A - Aggregate, K - Kernel Remnant, H - Hidden, P - Suppressed,
       NP - NAT Pool, U - Unreachable, i - Inactive

B               10.10.10.0/24       via 192.168.20.60, eth2, cost None, age 1310
                                        To R2
B            i  10.10.10.0/24       via 192.168.42.60, eth1, cost None, age 1341
                                        To R1
C               127.0.0.0/8         is directly connected, lo
C               192.168.20.0/24     is directly connected, eth2
C               192.168.40.0/24     is directly connected, eth0
B          H i  192.168.40.0/24     is an unusable route
                                        To R2
B          H i  192.168.40.0/24     is an unusable route
                                        To R1
C               192.168.42.0/24     is directly connected, eth1
MUM-FW01>

In fact my entire path is through one link but unable to achieve the redundancy through another link.

[Blason_R · Accepted solution]

That's surprising!! I mean does checkpoint shows one route as inactive? I mean show down one link and other route started showing as Active and installed. I mean scenario started working fine but was troubleshooting on inactive route.

MUM-FW01> show route all
Codes: C - Connected, S - Static, R - RIP, B - BGP (D - Default),
       O - OSPF IntraArea (IA - InterArea, E - External, N - NSSA),
       A - Aggregate, K - Kernel Remnant, H - Hidden, P - Suppressed,
       NP - NAT Pool, U - Unreachable, i - Inactive

B               10.10.10.0/24       via 192.168.42.60, eth1, cost None, age 1591
                                        To R1
C               127.0.0.0/8         is directly connected, lo
C               192.168.20.0/24     is directly connected, eth2
C               192.168.40.0/24     is directly connected, eth0
B          H i  192.168.40.0/24     is an unusable route
                                        To R2
B          H i  192.168.40.0/24     is an unusable route
                                        To R1
C               192.168.42.0/24     is directly connected, eth1

[Chris_Atkinson]

You would only see two active routes if they are "equal" with ecmp enabled.

BGP path commands should show more/both iirc.

[Blason_R]

Correct - That's a new thing for me. Thanks though and there was not issue at all though