04-20-2011 12:25 PM
I have a remote site with a PA500 and two ISPs. I would like to have all the browsing traffic go out ISP2. I want an IPsec tunnel traffic to go through ISP1, unless ISP1 service goes down. The home site has an ASA, and I can put a second IP in it for redundancy, but I do not know how to configure the PAN500 side to do the fail over.
05-02-2011 09:50 AM
So long as the tunnel is up and stable it will be treated like any other interface. To route specific traffic through a given path you will be using Policy Based Forwarding (PBF).
There are several articles in the KB that can assist you in setting up PBF for your special needs, otherwise you might want to tap your local SE for implementation assistance.
~Phil
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
