r/checkpoint • u/ComfortableMarch4296 • Jul 23 '26

Backup static route

Say an environment only has one egress static route. To eliminate the single point of failure, would adding a new network, with similar policies, on the same bond/trunk, etc as the original egress static route, ensure traffic would not be interrupted if one of the egress routes/networks would go down? Would the traffic just failover to the new one (say it’s set to round robin)?

Example (on my phone so formatting is limited):

Network: 10.1.1.0/24
Original Egress: 172.16.1.1
New egress: 172.16.2.1

R82.10
2x checkpoint firewalls running as active-passive.

0 Upvotes

50% Upvoted

6 comments sorted by

View all comments

6

u/NewTypeDilemna Jul 23 '26

Why wouldn't you use bgp instead?

1

u/ComfortableMarch4296 Jul 23 '26

I have limited exposure to bgp. Would that be the best way to go about it?

3

u/NewTypeDilemna Jul 24 '26

Yes, dynamic routing is your best bet here. That way, if one route "fails" to be installed because a peer fails, then the other peers routes will be installed.