Can I make PA3020 stop advertising default route in OSPF if its internet connection is down?

[JohnJCunningham]

Hi all,

This my first post on here.

I was trying to see if these devices have monitor/tracking features e.g. keep testing the internet connection to see if it is still up.

I want the PA to form a neighbor relationship with a cisco router and advertise a default route to it with OSPF. But I want the PA to stop advertising its route if its internet connection goes down.

I was looking at monitor profiles, but that doesn't seem to do what I need.

Am I going about this entirely the wrong way? How can I get the PA to stop advertising its default route once it is not an appropriate place to send internet traffic?

Thanks for any suggestions in advance.

Regards

John

[JohnJCunningham]

This appears to be a pointless exercise. Off to reddit with me then.

[OtakarKlier]

Hello @JohnJCunningham,

I am in a similar situation where this is going to be implemented. The good news is that in Version 8 of PANOS they added path monitoring for static route entries. This way you can use static routes with path monitoring and advertise those routes to the OSPF cloud and they sill stop advertising if path monitoring shows them not accessible.

https://www.paloaltonetworks.com/documentation/80/pan-os/newfeaturesguide/networking-features/static...

Cheers!