topic Re: Can I make PA3020 stop advertising default route in OSPF if its internet connection is down? in General Topics

Can I make PA3020 stop advertising default route in OSPF if its internet connection is down?

JohnJCunningham — Tue, 15 Aug 2017 12:54:24 GMT

Hi all,

This my first post on here.

I was trying to see if these devices have monitor/tracking features e.g. keep testing the internet connection to see if it is still up.

I want the PA to form a neighbor relationship with a cisco router and advertise a default route to it with OSPF. But I want the PA to stop advertising its route if its internet connection goes down.

I was looking at monitor profiles, but that doesn't seem to do what I need.

Am I going about this entirely the wrong way? How can I get the PA to stop advertising its default route once it is not an appropriate place to send internet traffic?

Thanks for any suggestions in advance.

Regards

John

Re: Can I make PA3020 stop advertising default route in OSPF if its internet connection is down?

JohnJCunningham — Wed, 16 Aug 2017 08:21:56 GMT

This appears to be a pointless exercise. Off to reddit with me then.

Re: Can I make PA3020 stop advertising default route in OSPF if its internet connection is down?

OtakarKlier — Thu, 17 Aug 2017 09:45:21 GMT

Hello @JohnJCunningham,

I am in a similar situation where this is going to be implemented. The good news is that in Version 8 of PANOS they added path monitoring for static route entries. This way you can use static routes with path monitoring and advertise those routes to the OSPF cloud and they sill stop advertising if path monitoring shows them not accessible.

https://www.paloaltonetworks.com/documentation/80/pan-os/newfeaturesguide/networking-features/static-route-removal-based-on-path-monitoring

Cheers!