topic Re: Static Routes for Subinterface in General Topics

Static Routes for Subinterface

TNethery — Fri, 11 Nov 2022 16:06:07 GMT

I have a question about static routes for subinterfaces for my ethernet1/2 interface, I currently have static routes for interface ethernet1/2 to access some remote servers, but many of my subinterfaces of ethernet1/2 also need the ability to access these remote servers. Do I need to create a static route for each subinterface (Example Ethernet1/2.101, etc) or will the static route for ethernet1/2 cover that?

Re: Static Routes for Subinterface

OtakarKlier — Fri, 11 Nov 2022 16:19:49 GMT

Hello,

Are these L2 or L3 interfaces? For my L2 sub interfaces, I have separate vlans and they do require routing such as the following:

What this does is tell the virtual router to send any traffic destined for that subnet to the proper interface, etc.

Hope this helps.

Re: Static Routes for Subinterface

TNethery — Fri, 11 Nov 2022 16:30:32 GMT

Currently, my subinterfaces are Layer3 under ethernet 1/2 with tags assigned, I am trying to upgrade from a unifi environment and trying to translate how there vlan's and static routes were configured in there to a Palo.

Re: Static Routes for Subinterface

TomYoung — Fri, 11 Nov 2022 16:40:20 GMT

Hi @TNethery ,

You could also leave the interface blank as long as you configure a next hop. The virtual router will use the route table to determine the egress interface.

Thanks,

Tom

Re: Static Routes for Subinterface

TNethery — Fri, 11 Nov 2022 16:54:11 GMT

Thanks for the suggestion but when I try to commit with None in the interface I get "Cant fint interface in 'default' for next hop Ip (Module: routed) client routed phase 1 failure"

Re: Static Routes for Subinterface

TomYoung — Fri, 11 Nov 2022 17:09:17 GMT

Hi @TNethery ,

Is your next hop in a subnet that is directly connected to the NGFW?

Thanks,

Tom