topic Re: Single firewall with core connections in General Topics

Single firewall with core connections

clydef — Fri, 03 Aug 2018 00:28:24 GMT

I have a single firewall no HA at the moment which is connected to my 2 core routers which the routers running HSRP. How does Palo device know which device to send traffic to as it seems its sending too both causing asymmetrical routing.

Re: Single firewall with core connections

santonic — Fri, 03 Aug 2018 06:44:50 GMT

PA sends traffic where you tell him too. You should tell him to send to cluster IP (or however it's called in HSRP). If that doesn't fix it then it's something wrong with your HSRP.

Re: Single firewall with core connections

BPry — Fri, 03 Aug 2018 16:05:50 GMT

@clydef,

You should be sending the traffic to a common shared IP, for example we'll say 10.191.0.1. The standby ip and standby priority statements would take care of which core actually recieves the traffic at any given time.