Identifying failed ISP in case of ISP redundancy

[Blason_R]

So, I always had this issue where customer is having a multiple ISP under their ISP redundancy but checkpoint does not have actual way to monitor ro alert if any of the ISP fails. Hence I quickly wrote a bash script and then created a custom SNMP OID whch I am monitoring and flags if any ISP fails

output=$(cpstat fw | grep -E 'Load|Active|Backup' | tr "|" " " | awk '{print $1" "$2}')
status=0
while read -r line; do
    link=$(echo "$line" | awk '{print $1}')   # Extract the link name
    status_val=$(echo "$line" | awk '{print $2}') # Extract the status

    if [[ "$status_val" != "OK" ]]; then
        echo "Down $link"
        status=1
    fi
done <<< "$output"
exit $status

Create a directory on firewall

# mkdir /var/log/snmpmon_script

Store files in those directory

Edit /etc/snmp/userDefinedSettings.conf And add below lines as appropriate 

extend .1.2.3.4.5.6.7.8.13 process_monitor /bin/sh /var/log/snmpmon_script/linkMon.sh

change the permission

chmod +x /var/log/snmpmon_script/linkMon.sh

Then restart snmp service

set snmp agent off
set snmp agent on
save config

[the_rock]

Amazing!

[Thomas_Eichelbu]

Wow cool stuff, 
yes right, with onboard monitoring tools its pretty though to get any visibility what ISP is really doing ...
recently i started to phase our ISP redundancy setups since many customer reported "Internet slowness" what ever it means. 
but ISP redundancy sends all traffic F2F in SXL which is really not perfect ...

[the_rock · Accepted solution]

Will see if I can test this properly in the lab.

Andy

[Blason_R]

200% This will work since I have 30 clusters are now being managed and monitored smoothly for any link failure 😉

[the_rock]

I like the level of sureness, if thats even a word 🙂

Best,

Andy