ISP Redundancy - Host Not Responding

[Wyman]

Hi. One of our sites have been seeing internet connection drops once a day over the past few days, for around 5 minutes. We have ISP redundancy enabled but our backup ISP hasn't been kicking in. I did a 'cpstat fw' and noticed that under the ISP link table the backup connection has a status of 'a host is not responding'.

The backup ISP gateway and the Checkpoint VIP can be pinged. Would a policy push force the backup link status to show as 'ok' again? Happy to receive other suggestions, I just don't want to do it and find that both our links go down.

[G_W_Albrecht]

sk65341: ISP Redundancy probing is not working in ClusterXL

sk61692: Troubleshooting ISP Redundancy

sk40958: How to verify the status of ISP Redundancy links on the command line

[Shira]

Hi,

We are having similar issue.

- We have 2 isp's in LS mode, but one showing "host is not responding".

ISP link table
------------------------------------------------
|Name |Status |Role |
------------------------------------------------
|NKN |A host is not responding|Load Sharing|
|BSNL |OK |Load Sharing|
------------------------------------------------

- when i tried "ping -I <nkn interface> 8.8.8.8" getting "destination host unreachable", but i am able to ping the next hop define in isp redundancy section.

- monitored ip's are different for each isp.

- single default route of BSNL isp is there.

- when nkn isp is directly connected to laptop and its working fine, but not when connected to firewall.(how?)

- it was working fine before, no changes done prior to the issue.

Would like to know what am i missing here or how to further troubleshoot on this one.

@PhoneBoy ,any suggestions. 

WR,

Shira

[PhoneBoy]

Best to involve the TAC here: https://help.checkpoint.com