Direct Internet Access to bypass Secure Fabric

BradleyWeatherill — Fri, 06 Oct 2023 23:02:21 GMT

Hello,

We're working on configuring Direct Internet Access for our VOIP subnet across multiple locations, allowing the traffic to bypass the secure fabric and go directly to the internet. However, we are unsure how to do this.

Here is some information:

Gateway settup on port 3 of an Ion

Static route:

Dest Prefix: 10.10.10.0/24

Scope: Local

Next Hops:

admin_distance: 1

nexthop_interface: N/A

nexthop_IP: 1.1.1.1 (internet gateway)

self: false

Path Set:

Network Context: none

Src Prefix: 10.10.10.0/24

Dest Prefix: 1.1.1.1

Apps: any

paths:

Active Path: Direct on Any Public

Backup Path: none

user/groups: Any

Service & DC Groups: None

Two other path rules are below this for our Secure Fabric connections.

topic Direct Internet Access to bypass Secure Fabric in Prisma SD-WAN Discussions

Direct Internet Access to bypass Secure Fabric