topic Two Static Route - same destination, Same metric in General Topics

Two Static Route - same destination, Same metric

Metgatz — Fri, 28 Oct 2022 06:25:50 GMT

Two Static Route - same destination, Same metric

Hello, good afternoon, thank you very much for your time, collaboration, time and suggestions.

Thinking in an environment where you have two routes to the same segment, example a pair of static routes through the Switch Core to LAN resources or two routes to the same destination, by two tunnels interfaces of a pair of VPN Site to Site to Azure.

According to the above, if I indicate the same route, to the same destination, with the same metric, but different interfaces, Palo Alto will generate an error when placing a route, to the same destination with the same metric ? Demanding to adjust the metric values or asking to enable ECMP ? And if it does not generate an error, in this case, which route will be used if both have the same metric ? which one goes from the RIB to the FIB ?

Thank you for your support, collaboration and time.

I remain attentive to your comments.

Best regards

Re: Two Static Route - same destination, Same metric

OtakarKlier — Mon, 31 Oct 2022 19:40:38 GMT

Hello,

I would recommend to use either Policy Based Forwarding for one of the routes with the static route being the method of last resort. Or you can weigh one of the routes. I have seen a lot of routing errors and connection failures due to asymmetric routing. I have been using OSPF for a long time and always add metrics to one of the paths. This way I know how the traffic is routed at all times and if there is monitoring, ie Solarwinds, I know which link went down based on the IP's I give the ends of the short hops, etc.

Regards,

Re: Two Static Route - same destination, Same metric

OtakarKlier — Wed, 02 Nov 2022 20:42:58 GMT

Hello,

Please check out my reply to this post to see if it helps.

https://live.paloaltonetworks.com/t5/general-topics/multi-site-dual-isp-with-redundant-vpn-connections-pbf-vs/m-p/205258#M60288

Regards,