Controlling ISP Redundancy from CLI

Force ISP Link State

Use the "fw isp_link" command to force the ISP link state to Up or Down.

Use this to test installation and deployment, or to force the Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. / Scalable Platform Security Group to recognize the true link state if it cannot (the ISP link is down but the gateway sees it as up).

• You can run this command on the Security Gateway:

  fw isp_link <Name of ISP Link in SmartConsole> {up | down}

• You can run this command on the Scalable Platform Security Group:

  g_fw isp_link <Name of ISP Link in SmartConsole> {up | down}

• You can run this command on the Security Management Server Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server.:

  fw isp_link <Name of Security Gateway Object> <Name of ISP Link in SmartConsole> {up | down}

For more information, see the R81 CLI Reference Guide > Chapter Security Gateway Commands - Section fw - Section fw isp_link.

The ISP Redundancy Script

When the Security Gateway starts, or an ISP link state changes, the $FWDIR/bin/cpisp_update script runs on the Security Gateway.

This script changes the default route of the Security Gateway.

Warning - We do not recommend that you make any changes to this script.