topic Re: Update routing table based on PING results in General Topics

Update routing table based on PING results

dwharam — Tue, 02 Sep 2014 14:43:27 GMT

Does anyone know if the PA supports dynamically updating the routing table on a PA FW based on PING results? Some vendors refer to this as IP SLA.

thanks

Daniel

Re: Update routing table based on PING results

reaper — Tue, 02 Sep 2014 14:47:22 GMT

Hi Daniel

You could set up policy based forwarding with monitoring but this would simply be a yes/no routing decision based on ping reply or timeout

Re: Update routing table based on PING results

pulukas — Sat, 06 Sep 2014 17:52:04 GMT

Palo Alto calls the IP SLA feature "Path Monitoring". This can be used with a variety of features like virtual routers, Policy Based Routing, VPN or High Availability to control failover scenarios.

Here are two sample configurations.

Dual ISP Branch Office Configuration

How to Configure Dual VPNs with Dual ISPs from a Single PAN to a Remote Site

Re: Update routing table based on PING results

hshah — Sat, 06 Sep 2014 20:47:07 GMT

Hi Dwharam,

Its possible through PBF. In PBF you can configure route failover upon ping response.

Refer following document for PBF configuration, Page 5 has information on Path Monitor which triggers failover of route based on ping.

Policy Based Forwarding

Regards,

Hardik shah