topic Re: Using ECMP and path monitoring in General Topics

Using ECMP and path monitoring

VinceM — Tue, 20 Oct 2015 07:55:52 GMT

Hi all,

Does anybody try to configure ECMP ?

I did and it works perfectly.

Only one question: on which condition, palo stop sending traffic through one of the ECMP gateway ?

I tried many config but the only one working is to shut the palo interface.

Mean there is no path monitoring ?

Waht's happen id the telco link is done ?

What's happen is gateway are not directly connected to the palo ?

Anybody have a solution ?

Rgds

Re: Using ECMP and path monitoring

cpainchaud — Tue, 20 Oct 2015 17:01:41 GMT

ECMP and static routes are the devil unless next hop are using 2 VRRP/HSRP and they never fail. If not possible then go for Dynamic Routing

Re: Using ECMP and path monitoring

VinceM — Wed, 21 Oct 2015 09:26:15 GMT

I agree with you but for sure Palo guy have not implement this feature without thinking we need to monitor access ... I hope.

Rgds

Re: Using ECMP and path monitoring

cpainchaud — Wed, 21 Oct 2015 09:33:11 GMT

if you ping a host then what about return packet ? nothing answer it will come back through the same gateway. If it's the case then you may deactivate the gateway is really working.

Re: Using ECMP and path monitoring

VinceM — Tue, 27 Oct 2015 21:51:25 GMT

Hi,

Thx for all info.

Mean ECMP with static routing is not usable. Maybe with dynamic it make sense ....

Re: Using ECMP and path monitoring

r3dp1ll — Fri, 06 May 2016 18:02:23 GMT

Can't believe that. Some customers have unstable links. For that scenario, to monitor the connections instead of the link state is fundamental.

I will keep searching for a solution to this issue without excluding the use of ECMP, but the result so far is not good.

Re: Using ECMP and path monitoring

cpainchaud — Wed, 11 May 2016 16:45:29 GMT

ECMP is not link/load sharing , what I read here is all but the use case of ECMP