topic Re: Default gateway to router with two IP address in General Topics

Default gateway to router with two IP address

jesus1000 — Thu, 19 Oct 2017 03:20:06 GMT

Hi, I am installing a PA-3020... the customer have a internet router which has two public IP address (190.30.40.1/24 as primary IP and 186.3.30.1/24 as secondary IP).
Currently the customer have a Cisco ASA, it is directly connected to internet router, but the IP address in Cisco ASA (untrust interface) is 190.30.40.2/24 and its default gateway of its only virtual router is 190.30.40.1... however this Cisco ASA have static Nat to expose services in internet using both network segments (190.x.y.z and 186.a.b.c).
My question is, in Palo Alto is that possible? So, the WAN or Untrust interface in Paloalto will have only one IP address like ASA but the Paloalto will can works with both network segments when I will configure Source or Destionation NAT o when I try to create a loopback using both networks?
Thanks

Re: Default gateway to router with two IP address

reaper — Thu, 19 Oct 2017 07:14:59 GMT

Hi @jesus1000

you can add a secondary IP range to the external interface, this will facilitate proxy-arp and routing and will prevent mistakes in the configuration

Re: Default gateway to router with two IP address

jesus1000 — Fri, 20 Oct 2017 00:49:19 GMT

Hi @reaper, thanks for your reply. I will try with your recommendation, tomorrow I have the windows maintenance.

Thanks

Regards

Re: Default gateway to router with two IP address

jesus1000 — Thu, 26 Oct 2017 13:18:20 GMT

Hi @reaper this workaround works, thanks you 😄