CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have 72 attendees signed up from 20 countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > ISP Redundancy
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2005-11-16
paul3105 paul3105 is offline
Junior Member
 
Join Date: 2005-11-15
Posts: 2
Rep Power: 0
paul3105 has an average reputation (10+)
Default ISP Redundancy issues

Good day everyone!

I have recently upgrade from R55 to R60 and i checked the ISP redundancy if still working. Yes it is still working but when you filter the xlatesrc to check whether if it's utilizing both links, I only see it uses only one link literally for all connections. It doesn't change or distribute to the other link. My setting is ISP load sharing therefore the firewall will evenly distribute the outbound connections evenly but it isn't. Both ISP is up and working and back from R55 it is working. I've also included to the settings the hosts that it will send icmp requests to check whether the links is up/down still it doesn't distribute. Are there are any advance settings or other configurations to manually distribute or any R60 issues regarding ISP redundancy???

A response is greatly appreciated, thanks!
Reply With Quote
  #2 (permalink)  
Old 2007-12-12
chandruenn chandruenn is offline
Junior Member
 
Join Date: 2006-12-06
Posts: 4
Rep Power: 0
chandruenn has an average reputation (10+)
Default Re: ISP Redundancy issues

Hi Paul3105,

I am trying to configure ISP Redundancy with One Leased Line and other one is DSL Link. When i say ok after configuring the ISP Redundancy i am getting an error saying that

"At least one of your ISP Links lack a next hop IP Address configuration.

Not: next hop IP Address is also used to automatically monitor the ISP Link's availability.

Are you sure you want to continue?"

Can you please guide how did u achieved the ISP Redundancy configurations.
Reply With Quote
  #3 (permalink)  
Old 2007-12-12
mcnallym mcnallym is offline
Senior Member
 
Join Date: 2007-06-04
Posts: 993
Rep Power: 2
mcnallym has an average reputation (10+)
Default Re: ISP Redundancy issues

Static NAT does only use 1 link even in Load Sharing, it is a documented issue and in the knowledgebase. Hide NAT should use both links if set to be Hide Behind Gateway so can use both IP addresses.
Reply With Quote
  #4 (permalink)  
Old 2007-12-13
chandruenn chandruenn is offline
Junior Member
 
Join Date: 2006-12-06
Posts: 4
Rep Power: 0
chandruenn has an average reputation (10+)
Default Re: ISP Redundancy issues

Hi,

I am facing the issues when i configure the ISP Redundancy support on the Smart Dashboards.

So, can you please guide how to acheieve this.

Chandru.
Reply With Quote
  #5 (permalink)  
Old 2007-12-13
mcnallym mcnallym is offline
Senior Member
 
Join Date: 2007-06-04
Posts: 993
Rep Power: 2
mcnallym has an average reputation (10+)
Default Re: ISP Redundancy issues

Where you define the interfaces used for ISP Redundancy there is also a section for both interfaces to add the next hop.

Make sure you fill this in for both.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 10:56.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0