topic Route Decision in Palo Alto firewall without interface mentioned in virtual router in General Topics

Route Decision in Palo Alto firewall without interface mentioned in virtual router

nagarjuna.b — Fri, 22 Feb 2019 18:20:16 GMT

Hi There,

Can we configure static routes in virtual router without mentioning what interface to use? Can Palo alto smart enough to identify the right interface based on the nexthop IP address? I am believing yes, could you please confirm me. especially in the case of Aggregated interfaces though, I have all AG interfaces on my PA device. Does it work without the interface mentioned in the routing table?

Regards,

Nagarjuna

Re: Route Decision in Palo Alto firewall without interface mentioned in virtual router

Raido_Rattameister — Fri, 22 Feb 2019 19:05:13 GMT

I tested with 8.1.6 and it worked and traffic was forwarded towards correct interface.

Next hop was behind subinterface unter aggregate.

Re: Route Decision in Palo Alto firewall without interface mentioned in virtual router

nagarjuna.b — Sat, 23 Feb 2019 03:30:25 GMT

Thank you sir, I am delighted with this confirmation.