topic Re: Static Route via CLI in General Topics

Static Route via CLI

mali77palo — Tue, 20 Dec 2016 16:41:45 GMT

I have a firewall with multiple Vsys/VRs. Need to add a static route from one VR to another and I know I can do it via GUI, however I like to use the CLI if possible. So would this command add the static route from one VR pointing to another?

set network virtual-router VR-Inside routing-table ip static-route 10.10.10.10/32 nexthop next-vr VR-Inside2
set network virtual-router VR-Inside routing-table ip static-route 10.10.10.20/32 nexthop next-vr VR-Inside2

Re: Static Route via CLI

BPry — Tue, 20 Dec 2016 16:46:53 GMT

That command should work perfectly fine. I would probably make sure to run validate full command after making the changes to make sure that the configuration is going to be valid, but I don't see why you would have any issues with the commands themselves.

Re: Static Route via CLI

mali77palo — Tue, 20 Dec 2016 17:04:27 GMT

Thank you, is it possible to see it int he config after typing in the command or a similar route that already exists? For instance in the Cisco ASA I can see the existing routes by piping the command. I know with Palo I can pipe with the match argument. But what can I type before show deviceconfig | match 10.10.10.10?

Re: Static Route via CLI

TranceforLife — Tue, 20 Dec 2016 17:17:45 GMT

> show config running | match x.x.x.x

I personally prefer to use GUI when working with Palo as this is one of the beauty of this device:-)