topic Re: How to configure new ISP to make dual ISPs Active Active on single firewall Palo Alto. in General Topics

How to configure new ISP to make dual ISPs Active Active on single firewall Palo Alto.

abdulhakam — Mon, 07 Dec 2020 11:22:15 GMT

Hi All,

How to configure dual ISP with both ISP is active at the same time.

Local user can user both Isp when they using Internet.

How possible ?

PA-200 PAN OS 8.1.8

Thanks. Pls Advise.

Re: How to configure new ISP to make dual ISPs Active Active on single firewall Palo Alto.

SureshReddyM — Mon, 07 Dec 2020 12:03:36 GMT

Hi Abdulhakam,

If you are using BGP ( Dynamic Routing Protocol) then you can do load-balancing both links with prefix-based-Ips' subnets both live and also you can use AS-PATH attribute to provide the dynamic redundancy as well if one link down.

Or if you are using the static route then you can configure multiple static default routes with path monitoring to provide the failover if the lowest path is failed. Here you can get Active/Active load balancing.

Best Regards,

Suresh

Re: How to configure new ISP to make dual ISPs Active Active on single firewall Palo Alto.

abdulhakam — Mon, 07 Dec 2020 12:31:14 GMT

Hi Suresh, I think using BGP when I checked on virtual router. Have configuration on BGP and don't have static route. ISPs using dynamic IP address. On port 1/1. I plan to another ISP will use port 1/2. Can you share details about configuration ? Thanks Hakam

Re: How to configure new ISP to make dual ISPs Active Active on single firewall Palo Alto.

SutareMayur — Mon, 07 Dec 2020 15:10:09 GMT

Hi @abdulhakam ,

You can achieve it using ECMP. With this, firewall will have equal cost routes to the internet. And firewall will take one of the route to pass the traffic. Also you can have route monitoring for the failover. In case, any of the internet goes down, firewall will remove its associated route from the FIB. You can refer below article for configuration details.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClF8CAK

Hope it helps!

Re: How to configure new ISP to make dual ISPs Active Active on single firewall Palo Alto.

abdulhakam — Mon, 07 Dec 2020 23:48:01 GMT

Hi @SutareMayur ,

Thanks for respond,

It's possible implement with both ISPs using dynamic (PPPoE).?

I saw the link below have using Static Ip Address.

Thanks
Hakam

Re: How to configure new ISP to make dual ISPs Active Active on single firewall Palo Alto.

vinohtkumar — Tue, 28 Jun 2022 07:20:00 GMT

it's doable you can utilize ecmp and with the help of balanced roundrobin we can achieve active-active load balance.