topic Service route in panorama. in General Topics

Service route in panorama.

Jafar_Hussain — Sun, 28 Jun 2020 12:12:33 GMT

Dear Team,

I have two interfaces configured in my panorama:

1-management interface

2 -ethernet1/1.

for software and dynamic updates by default, my traffic is going via management interface. I want to change the service route through ethernet1/1 but I am not able to see any option to change the service route. below is the snapshot.

can anyone help with this where I can find this option?

Re: Service route in panorama.

MP18 — Sun, 28 Jun 2020 15:30:27 GMT

You are in the right track.

You should see

Pa has role based access control.

so you need to have rights to see all the info on gui

Can you log into this PA with admin username and then try?

Re: Service route in panorama.

Jafar_Hussain — Sun, 28 Jun 2020 15:32:16 GMT

@MP18Yes, i have the super admin rights.

Is there any way to change the service route through the CLI.

Re: Service route in panorama.

MP18 — Sun, 28 Jun 2020 15:43:19 GMT

Yes you can change it via cli.

Please use below command from config mode

# set deviceconfig system route service ??

example

set deviceconfig system route service paloalto-networks-services source address 10.0.10.1/24

where source address can be of data plane interface

Re: Service route in panorama.

Jafar_Hussain — Sun, 28 Jun 2020 16:39:03 GMT

@MP18Thank you for your reply,

I have checked this command is only working in Palo alto. when I check the same command in panorama it is not working.

Re: Service route in panorama.

MP18 — Sun, 28 Jun 2020 18:09:48 GMT

My bad.

Need morning coffee.

As Panorama is only for management and no data traffic goes via Panorama so that's the reason there is no service route config there

So this is by design you do not see service route config in GUI.

Re: Service route in panorama.

Jafar_Hussain — Sun, 28 Jun 2020 18:21:20 GMT

@MP18

Thanks for the reply, it means we can not change the default behavior of the panorama to update the software or dynamic updates through the data plane interface(ethernet 1/1) interface.