nokia legacy vrrp failover

From cpwiki.net
Revision as of 18:27, 12 July 2014 by Nighthawk (Talk | contribs)

Jump to: navigation, search
Check Point Profressional Services

O.S. version: IPSO 4.2


If stuck working on and archaic firewall with a legacy vrrp setup, vrids must be failed over individually. The commands are below as shown by a one-liner script that will output the commands needed for you.


# clish -c "show vrrp interfaces" | grep -E "Interface|VRID" | awk '{ if ($1=="Interface") printf "clish -c \"set vrrp interface %s ", $2; else printf "monitored-circuit vrid %s priority 105\"\n",$2;}'

monitored-circuit vrid Interfaces priority 105" <<<ignore first line of output

clish -c "set vrrp interface eth-s1/s1p1c0 monitored-circuit vrid 48 priority 105"
clish -c "set vrrp interface eth-s1/s2p2c1 monitored-circuit vrid 153 priority 105"
clish -c "set vrrp interface eth-s1/s2p2c10 monitored-circuit vrid 165 priority 105"
clish -c "set vrrp interface eth-s1/s2p2c11 monitored-circuit vrid 164 priority 105"
clish -c "set vrrp interface eth-s1/s2p2c12 monitored-circuit vrid 167 priority 105"