Azure LB Static Route and IPSEC failover

ASingh106 — Tue, 02 Nov 2021 14:32:21 GMT

I am having the attached topology. I have two ipsec tunnel from two vm series paloalto to same peer ip which is in prisma cloud.

on trust side I have an Azure load balancer which would send traffic to 2 firewalls and having a health probe as ssh to the firewalls.

My requirement is to remove the red static route towards azure LB when the green static route it down. I am monitoring same IP 10.49.0.254 accross the other side of the tunnel.

So basically I am trying to remove the connection to LB when IPSEC tunnel is down for PAN-mgmt-01.

I added a path monitor to Red static route with 10.49.0.254 as mmonitored IP, but the path monitor would stay up even when tunnel is down.

topic Azure LB Static Route and IPSEC failover in VM-Series in the Public Cloud

Azure LB Static Route and IPSEC failover