topic Is it possible to configure dynamic load balancing using Routing protocols for below shown topology? in General Topics

Is it possible to configure dynamic load balancing using Routing protocols for below shown topology?

Gururaj — Sat, 27 Apr 2013 04:49:58 GMT

Hi All,

Is it possible to configure dynamic load balancing using Routing protocols which are supported by PaloAlto?

Requirement : We have total 16 MB line ( 8 MB from Aircel ISP and 8 MB rom TATA ISP ). We are looking to balance the load on both isp based on the traffic, means full 16 MB utilization at any given time for below topology.

Example : If the load on Airtel isp is 6 MB and on TATA isp is 2 MB then load needs to be split on both isp as 4 MB each.Kindly help me ASAP.

Thank you,

Gururaj

Re: Is it possible to configure dynamic load balancing using Routing protocols for below shown topology?

NGS_SOC — Sun, 28 Apr 2013 22:29:46 GMT

PA is not a load balancer so you only count on PBF trying to divide traffic for the two gateways taking considertion source variables (like ip-address, users, application etc). A sort of balancing using ospf dynamic routing can be obtained only with A/A infrastructure but this cannot be achieved with PA-200 (like in pictures) and need also higher routing and swithcing.

If you need something deeper you probably need a pure aggregator/load balancer, there are plenty of them in the market. I usually use this http://peplink.com/

Re: Is it possible to configure dynamic load balancing using Routing protocols for below shown topol

Retired Member — Thu, 15 Oct 2015 12:28:30 GMT

Hello NGS.

I have a question:

This is not possible with the PA-200. Is it possible with another model of PA Firewalls or always I'll need an additional load balancer?

best regards.

Re: Is it possible to configure dynamic load balancing using Routing protocols for below shown topol

Raido_Rattameister — Thu, 15 Oct 2015 13:05:31 GMT

Do you want users behind Palo to browse web over both ISP's or have web servers behind Palo that are accessible from internet?

Starting from v7 Palo supports session based ECMP

https://paloaltonetworks.com/documentation/70/pan-os/pan-os/networking/ecmp-load-balancing-algorithms.html

And you can use BGP but Palo is not full blown BGP router so you can't have all internet routes there.