Palo Alto MPLS failover

Mohsin91 — Wed, 20 Dec 2017 09:05:59 GMT

Please give me a best Solution

I have one Palo alto firewall and Branch end Cyberoam

I need to do MPLS VPN Failover between both device any suggetion it will work or not

palo alto MPLS supported or not ?

Thanks regrards

Hiroli Mohsin

Re: Palo Alto MPLS failover

OtakarKlier — Wed, 20 Dec 2017 21:46:18 GMT

Hello,

If i understand your question correctly, you want two connections between two PAN's? I have done this many times in the past and works out pretty well. What I usually do is setup a Policy Based Forwarding policy that sends all traffic over the MPLS connection on the far side 'stub' network. I also have OSPF setup between the two so that routes are updated automatically with the VPN connection with a higher cost so its not favored unless its last resort.

This way id the MPLs goes down, it'll swap to the VPN and when the MPLS comes back up, it fails back to it. I usually build in a minor delay to prevent flapping incase the MPLS is bouncing.

Let me know if you need a deeper dive.

Cheers!

topic Palo Alto MPLS failover in General Topics

Palo Alto MPLS failover

Re: Palo Alto MPLS failover