2nd default route

[jac101]

My PA already has a Default Gwy pointed to the current Internet provider. I got a new Internet provider and I'd like to test the Internet connection by only allow my traffic to go to the new Internet connection. What is the side effect if I add another Default Gwy pointed to the new Internet provider? Thx

[OtakarKlier]

Hello,

If you just want to test it with just one host, then here is one method:

1. add the IP of your new ISP to the interface you are connecting to the new ISP so they can at least ping each other

2. add a route that says new ip to new gateway, i.e. x.x.x.x/30 -> y.y.y.y gateway

            dont add another default route

3. create a policy base forwarding rule to say your test machine send all traffic out the new interface

            policy based forwarding takes affect prior to the virtual router, hence no need for another default route

4. add appropriate policies to allow the traffic unless the new ISP and old ISP are in the same zone.

Should work for you.

[jac101]

So for the static route, for ex., my outside interface (e1/2) is 1.1.1.1/30 and my ISP is 1.1.1.2/30. My static route should be destination 1.1.1.2/30 next hop as e1/2. Correct?

I also need to configure NAT. Correct?

[OtakarKlier]

Hello,

Yes a NAT is required as well, my bad. And correct on the route. Out interface 1/2 with next hop IP of 1.1.1.2/30.

Cheers!