<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: OSPF between PAN devices in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/ospf-between-pan-devices/m-p/21593#M15776</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Cant you just use route health injection/IP-SLA on ROUTER1/ROUTER2 instead?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;So each PAN devices will just have their physical linknets along with default route to each ISP.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;This way you can withdraw the route going through each PA when you fail to ping Internet ISPx or the next hop from there (make sure that you define egress interface when you setup the ip-tracking so it wont track by routingtable but by physical interface)?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Edit: The result would be:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;ROUTER1: ping Internet ISP1, if ping fails remove default route pointing to PA1.&lt;/P&gt;&lt;P&gt;ROUTER2: ping Internet ISP2, if ping fails remove default route pointing to PA2.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;and OSPF (or whatever) between ROUTER1 and 2 will handle metric/costs and where each client can find the best way out.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Tue, 18 Sep 2012 07:41:02 GMT</pubDate>
    <dc:creator>mikand</dc:creator>
    <dc:date>2012-09-18T07:41:02Z</dc:date>
    <item>
      <title>OSPF between PAN devices</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/ospf-between-pan-devices/m-p/21592#M15775</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hi all,&lt;/P&gt;&lt;P&gt;I have the following scenario:&lt;/P&gt;&lt;P&gt;CPD 1: Internet ISP1 -- PAN1 -- ROUTER1&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;CPD 2: Internet ISP2 - PAN 2 -- ROUTER2&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;And a layer 2 connection between CPD1 and CPD2 (in different locations). Initially, there were only router1 and router2 (with their respective ISP Internet connections) with OSPF area 0; now,&amp;nbsp; I've added a PAN device to each CPD, including them in OSPF area 0, but not in HA.&lt;/P&gt;&lt;P&gt;My first idea was to:&lt;/P&gt;&lt;P&gt;- Each location uses their ISP internet access, located in the same building.&lt;/P&gt;&lt;P&gt;- In case of failure, a location will use the other ISP internet access, using OSPF routing.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;These scenario could be possible if the failure point are the PAN devices. But if the failure is in any of the Internet ISP routers (not talking OSPF and controlled by the ISP provider), how can I modify the OSPF path costs to use the other ISP router? Is there any possibility of OSPF track?&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 17 Sep 2012 21:15:11 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/ospf-between-pan-devices/m-p/21592#M15775</guid>
      <dc:creator>dept_tec_bcn</dc:creator>
      <dc:date>2012-09-17T21:15:11Z</dc:date>
    </item>
    <item>
      <title>Re: OSPF between PAN devices</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/ospf-between-pan-devices/m-p/21593#M15776</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Cant you just use route health injection/IP-SLA on ROUTER1/ROUTER2 instead?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;So each PAN devices will just have their physical linknets along with default route to each ISP.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;This way you can withdraw the route going through each PA when you fail to ping Internet ISPx or the next hop from there (make sure that you define egress interface when you setup the ip-tracking so it wont track by routingtable but by physical interface)?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Edit: The result would be:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;ROUTER1: ping Internet ISP1, if ping fails remove default route pointing to PA1.&lt;/P&gt;&lt;P&gt;ROUTER2: ping Internet ISP2, if ping fails remove default route pointing to PA2.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;and OSPF (or whatever) between ROUTER1 and 2 will handle metric/costs and where each client can find the best way out.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 18 Sep 2012 07:41:02 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/ospf-between-pan-devices/m-p/21593#M15776</guid>
      <dc:creator>mikand</dc:creator>
      <dc:date>2012-09-18T07:41:02Z</dc:date>
    </item>
    <item>
      <title>Re: OSPF between PAN devices</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/ospf-between-pan-devices/m-p/21594#M15777</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Yes, good idea... I'll try it. But it would be great that PA could track routes for dynamic routing; PBF is very useful, but not enough for this kind of scenarios.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 19 Sep 2012 14:22:58 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/ospf-between-pan-devices/m-p/21594#M15777</guid>
      <dc:creator>dept_tec_bcn</dc:creator>
      <dc:date>2012-09-19T14:22:58Z</dc:date>
    </item>
  </channel>
</rss>

