IP sla monitor on 5400 to track for default route?

[beemas]

Is there a way to set up an ip sla monitor or ICMP track on a 5400 switch that can be used to determine the default route?  I have a default static route on my 5406 which points to a firewall with an Internet connection.  When that Internet connection fails, I would like for the traffic to automatically failover to another switch which is connected to a different firewall, with a completely separate Internet connection.  The two switches are running OSPF and are sharing routes, but each have a default route pointing out to their respective firewall and Internet connection.  Any help would be greatly appreciated! :)

[paulgear]

If you're running OSPF, an effective way to do this would be to include the firewalls in OSPF and have each originate a default route. That way each switch would use the other's default route if their own went away. There may need to be some tweaking of administrative distance and the like, but OSPF is definitely my preferred way of doing it.

[Kashif78]

Hi ,

I am also stuck with this requiremeny any one have a luck finding out any solution for this

Does HP procuve switch support IP SLA like cisco Switches do ?

I cannot run OSPF in my environment.

I have a bit clue that it is supported on A series switches , but never tried it .

[Richard Litchfield]

The HP Comware switch analog to the Cisco IP SLA is NQA (network quality assurance/analyser). This is not available in the ProCurve switches.

If you have v2 modules in the 5400, and a K15 firmware, you can do policy-based routing (PBR) - that might be the way to do this.

[Peter_Debruyne]

Hi,

Provision supports the basic routing functions, but any complex routing scenario's require comware (a-series).

So 2 options:

* Bring the problem back to the source : If the firewall supports ospf routing, make sure they have an ospf peering with the 5400, and let the firewall inject the default route into ospf (no more static on the 5400). The firewall can then track the intenet link status and can remove the defaeult route announcement in ospf when the internet link is gone. Each firewall can inject the default route with a different cost, so the primary fw will be preferred (based on cost).

* When the fw does not support ospf, you can introduce 2 MSR (comware) routers between the fw and the core 5400 and let these MSR routers do the NQA tracking and the ospf injection of the default route(like scenario above) into the ospf environment.

Best regards,Peter.