Is it possible to take an interface down using IP SLA

[carl_townshend]

Hi All

I have an issue whereby I am routing to a next hop from a Checkpoint firewall, the next hop being a Cisco router.

if the WAN side of the router goes down the Checkpoint will still route packets to the router and get dropped.

Would it be possible to track an ip route on the wan on the router and if this route goes, would it be possible to shutdown  the LAN interface on the router? that way the Checkpoint firewall will take the route out of its table.

I don't think its possible we can use OSPF etc else it would be easier.

cheers

[Mark Malone]

Hi
ive seen posts like this before example below , it can be done with an EEM script in conjunction with the ip sla commands
instead of ping track an upstream route with the ip sla and tracking then use the EEM to shut the interface
You could also add to the script to bring the interface backup if it sees the route come back in the table

https://community.cisco.com/t5/network-management/shut-an-interface-if-no-ping-response-using-ip-sla-eem/td-p/1378421