topic Re: Route internet traffic per source subnet to two different Internet Links in General Topics

Route internet traffic per source subnet to two different Internet Links

myasin — Wed, 02 Aug 2017 08:21:46 GMT

I will connect a new Internet link to firewall "so I will have two internet links" and want to load internet traffic over both links based on the source subnet, and want both links to be backup for each others, how I can configure this?

Thanks

Re: Route internet traffic per source subnet to two different Internet Links

TranceforLife — Wed, 02 Aug 2017 08:27:00 GMT

PBF should work for you

Re: Route internet traffic per source subnet to two different Internet Links

myasin — Wed, 02 Aug 2017 09:42:34 GMT

Please share a configuration sample

Re: Route internet traffic per source subnet to two different Internet Links

TranceforLife — Wed, 02 Aug 2017 09:44:37 GMT

quick Google search:

https://blog.webernetz.net/2014/03/04/policy-based-forwarding-pbf-on-a-palo-alto-firewall/

Re: Route internet traffic per source subnet to two different Internet Links

myasin — Wed, 02 Aug 2017 16:50:37 GMT

Whats missing is that I need both internet links to be backup for each others "for the all internet traffic", in-case one of them was down.

and if both were up then each link must carry certain source subnets.

Now through PBF I can force some source subnet to be routed through the second link, but what if this link goes down...

Re: Route internet traffic per source subnet to two different Internet Links

BPry — Wed, 02 Aug 2017 17:52:14 GMT

@myasin,

You can toss a monitoring rule on that PBF so that it's disabled should one of your links go down.

Re: Route internet traffic per source subnet to two different Internet Links

myasin — Wed, 02 Aug 2017 18:59:32 GMT

Great...
So please correct me if I am wrong;
Again our target is to use the first link for almost all traffic, and the second link for one subnet.
If the second link goes down then this subnet must use first link, and if the first link goes down then all traffic must use the second link.

What I am going to do;
Assign all interfaces to the default vrouter, and configure two default routes with different metrics (first link is prefered).
And configure PBF for the selected subnet to be routed through the second link, and configure monitoring for this PBF.

Is this going to work?

Thanks