- Products
- Learn
- Local User Groups
- Partners
- More
Check Point Jump-Start Online Training
Now Available on CheckMates for Beginners!
Welcome to Maestro Masters!
Talk to Masters, Engage with Masters, Be a Maestro Master!
ZTNA Buyer’s Guide
Zero Trust essentials for your most valuable assets
The SMB Cyber Master
Boost your knowledge on Quantum Spark SMB gateways!
Check Point's Cyber Park is Now Open
Let the Games Begin!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
CheckFlix!
All Videos In One Space
Hi,
I am going to configure ISP redundancy in our R80.40 Cluster, Primary/Backup mode.
I have some doubts about the ISP Redundancy Script. The administration guide says ‘if one of the ISP links is the connection to a backup ISP, configure the ISP Redundancy Script’. However, when I check the section about the ISP redundancy script, it says ‘Warning - We do not recommend that you make any changes in this script.’ It would be ideal that the Primary ISP link would be the active one when becomes available again.
Any ideas about what should I do? If I need to change the ISP redundancy script, what changes are needed?
I have another question. When the ISP redundancy is set, and the next hop is configured for both links, what is the effect of ‘IPv4 Static Routes’ for the default gateway in Gaia? Should I add another default route for the ISP backup link on there?
Thanks in advance
I cant speak for anyone else, but I can tell you I configured this for few customers and we never had to run any script, or change anything. Just followed below doc and worked fine. Just make sure you indicate next hop IP as IP of device leading to your ISP and also check option to apply to VPN settings at the bottom.
Hi
No need to modify the script itself.
As for the static routes already configured - there is no need to configure the additional route, this is exactly what the script does when invoked upon ISP failover.
I cant speak for anyone else, but I can tell you I configured this for few customers and we never had to run any script, or change anything. Just followed below doc and worked fine. Just make sure you indicate next hop IP as IP of device leading to your ISP and also check option to apply to VPN settings at the bottom.
Hi
No need to modify the script itself.
As for the static routes already configured - there is no need to configure the additional route, this is exactly what the script does when invoked upon ISP failover.
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY