<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic 2nd default route in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/2nd-default-route/m-p/209649#M61276</link>
    <description>&lt;P&gt;My PA already has a Default Gwy pointed to the current Internet provider. I got a new Internet provider and I'd like to test the Internet connection by only allow my traffic to go to the new Internet connection. What is the side effect if I add another Default Gwy pointed to the new Internet provider? Thx&lt;/P&gt;</description>
    <pubDate>Wed, 11 Apr 2018 20:42:20 GMT</pubDate>
    <dc:creator>jac101</dc:creator>
    <dc:date>2018-04-11T20:42:20Z</dc:date>
    <item>
      <title>2nd default route</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/2nd-default-route/m-p/209649#M61276</link>
      <description>&lt;P&gt;My PA already has a Default Gwy pointed to the current Internet provider. I got a new Internet provider and I'd like to test the Internet connection by only allow my traffic to go to the new Internet connection. What is the side effect if I add another Default Gwy pointed to the new Internet provider? Thx&lt;/P&gt;</description>
      <pubDate>Wed, 11 Apr 2018 20:42:20 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/2nd-default-route/m-p/209649#M61276</guid>
      <dc:creator>jac101</dc:creator>
      <dc:date>2018-04-11T20:42:20Z</dc:date>
    </item>
    <item>
      <title>Re: 2nd default route</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/2nd-default-route/m-p/209656#M61277</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;If&amp;nbsp;you just want to test it with just one host, then here is one method:&lt;/P&gt;&lt;P&gt;1. add the IP of your new ISP to the interface you are connecting to the new ISP so they can at least ping each other&lt;/P&gt;&lt;P&gt;2. add a route that says new ip to new gateway, i.e. x.x.x.x/30 -&amp;gt; y.y.y.y gateway&lt;/P&gt;&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; dont add another default route&lt;/P&gt;&lt;P&gt;3. create a policy base forwarding rule to say your test machine send all traffic out the new interface&lt;/P&gt;&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; policy based forwarding takes affect prior to the virtual router, hence no need for another default route&lt;/P&gt;&lt;P&gt;4. add appropriate policies to allow the traffic unless the new ISP and old ISP are in the same zone.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Should work for you.&lt;/P&gt;</description>
      <pubDate>Wed, 11 Apr 2018 20:49:21 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/2nd-default-route/m-p/209656#M61277</guid>
      <dc:creator>OtakarKlier</dc:creator>
      <dc:date>2018-04-11T20:49:21Z</dc:date>
    </item>
    <item>
      <title>Re: 2nd default route</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/2nd-default-route/m-p/209677#M61283</link>
      <description>&lt;P&gt;So for the static route, for ex., my outside interface (e1/2) is 1.1.1.1/30 and my ISP is 1.1.1.2/30. My static route should be destination 1.1.1.2/30 next hop as e1/2. Correct?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I also need to configure NAT. Correct?&lt;/P&gt;</description>
      <pubDate>Thu, 12 Apr 2018 01:28:12 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/2nd-default-route/m-p/209677#M61283</guid>
      <dc:creator>jac101</dc:creator>
      <dc:date>2018-04-12T01:28:12Z</dc:date>
    </item>
    <item>
      <title>Re: 2nd default route</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/2nd-default-route/m-p/209777#M61300</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;Yes a NAT is required as well, my bad. And correct on the route. Out interface 1/2 with next hop IP of&amp;nbsp;&lt;SPAN&gt;1.1.1.2/30.&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;Cheers!&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 12 Apr 2018 14:00:53 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/2nd-default-route/m-p/209777#M61300</guid>
      <dc:creator>OtakarKlier</dc:creator>
      <dc:date>2018-04-12T14:00:53Z</dc:date>
    </item>
  </channel>
</rss>

