bundle gre tunnels and distribute internet traffic across them

Johndbabio1 — Mon, 06 Feb 2023 13:22:32 GMT

Has anyone had a location with more than 1Gbps internet link and also have Zscaler? The limitation to Zscaler is 1Gbps gre tunnel. We have a 10Gbps link and this doesn't work. We have to create 5 nats across 2 routers behind a firewall to build 10 GRE tunnels. I wanted to do something similar at the edge with palo alto but i am not seeing what i need. I would need to policy route across all links to take advantage of the bandwidth. Any ideas would be helpful to try and acheive this.

Re: bundle gre tunnels and distribute internet traffic across them

Raido_Rattameister — Mon, 06 Feb 2023 13:33:42 GMT

If you enable ECMP in Palo virtual router you can have multiple identical routes over different paths with same metric.

In this case traffic will be load balanced over all those links.

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-networking-admin/ecmp

topic bundle gre tunnels and distribute internet traffic across them in Next-Generation Firewall Discussions

bundle gre tunnels and distribute internet traffic across them

Re: bundle gre tunnels and distribute internet traffic across them