Template variable in PBF?

Anbjorn — Thu, 28 Jan 2021 13:09:23 GMT

Is it possible to use a template variable in the PBFs next hop ip address field?

PBF variable

Using 9.0.11

Re: Template variable in PBF?

reaper — Thu, 28 Jan 2021 19:37:21 GMT

unfortunately that's not possible

may want to each out to your SE to submit a feature request

Re: Template variable in PBF?

O.Rietbrock — Mon, 19 Aug 2024 14:48:10 GMT

Hello,
I have looked into the same issue and figured a work around with a FQDN and DNS Proxy setup.
1. Setup DNS-Proxy

2. Bind DNS Proxy on a Loopback interface

3. Configure Inheritance Source to "none"

4. Set Primary and Secondary to your mgmt DNS servers
5. Create static entry to respond to an unresolvable FQDN and set variable to your ISP gateway IP.

6. Configure Device -> System -> Services -> DNS = DNS Proxy Object & set the DNS-Proxy

- DNS-Proxy uses the Data Plane Routing -> implement NAT- and Policy Rules to redirect DNS through VPN or public routing accordingly

7. Test the DNS resolving to the ISP IP/FQDN mapping

- Note: Check local Firewall Device Services Overwrite settings.

8. Configure PBF policy using FQDN as next-hop.

Important note:

DHCP is also not supported by this solution.

PBF monitoring does not support FQDN either.

Solution is SD-WAN licensing for proper PA support.

topic Re: Template variable in PBF? in General Topics

Template variable in PBF?

Re: Template variable in PBF?

Re: Template variable in PBF?