topic Re: Service Route Help in General Topics

Service Route Help

COlson — Fri, 04 Dec 2020 17:45:34 GMT

Hello,

I need to create a source service route for LDAP on one of our PANs due to MGT interface IP being unable to access the LDAP servers (I am unable to change this). I have gone into Device, Setup, Services, Service Route Configuration, selected customize and then changed LDAP to use ethernet1/1 and the source of that address. I then committed the changes. However, I still see no changes to the LDAP requests... logs show that the PAN is still trying to access LDAP server over the MGT interface and after further research it seems I should see source service routes using this command : "debug dataplane internal vif route 250" but when I do that, it shows up as blank.

Is there some step I am missing?

Thanks.

Re: Service Route Help

BPry — Fri, 04 Dec 2020 18:23:16 GMT

@COlson,

That would be everything that you actually need to do to get this to work and that debug command should deffinately be showing something if properly configured. First thing I would do is go and make absolutely sure that you actually committed the configuration and that it didn't error out.

If you go into configure mode and run 'show deviceconfig system route service' it will list out all of your service routes. Verify that ldap is showing up properly.

Re: Service Route Help

COlson — Fri, 04 Dec 2020 19:22:08 GMT

Commit shows no error. When I go to the actual PAN device and look at the service route, I can see it's set to customize, and LDP has a source interface of ethernet1/1 and the source address of that interface.

'show deviceconfig system route service' returns 'service;'

Should this not be configured from Panorama (the interface is not showing as being overridden so I can see that the template pushed successfully but now I'm curious.)?

Thanks.

Re: Service Route Help

COlson — Mon, 07 Dec 2020 15:11:21 GMT

I was able to get this work but only by doing an override on the local PAN. The settings are exactly the same as I used in Panorama but they only worked once I overrode the service route config.

Thanks.