I have a PA200 which has only 4 network ports. But now I have 2 direct internet connections and 2 4g connections and 1 is uplink to my network. Would it be possible to connect a port of the pa200 not directly to the router but to a small 8port switch to which my two routers are connected? These have the IP 192.168.5.1/24 and 192.168.6.1/24.
What do I have to configure on the ethernet 1/4 port of the PA200? Put them there as IP address? And routing technical? Where should the default route point to? 0.0.0.0 to 192.168.6.1? Only one can do it.
the PA-200 supports tagged sub-interfaces, so you could connect it to a managed switch and create different VLANs for every WAN connection, which would enable you to have all 4 outbound connections on one single physical interface (or more to spread the bandwidth, as needed)
here's an article on sub-interfaces: https://live.paloaltonetworks.com/t5/Featured-Articles/Getting-Started-Layer-3-Subinterfaces/ta-p/67...
A bigger device that is properly spec'd for your enviroment and what you are attempting to accomplish?
Depending on what you are attempting to do you don't need different VRs for each connection; you could easily take advantage of Metrics and Path Monitoring on the individual routes to bypass this, you might have to use a bit of PBF to get this to function exactly as you would like though. This of course all depends on what you're using each connection for; but you absuletly don't need a new VR per internet connection.
I want to transfer client a via internet a and client b via a different internet b line. My default virtual router has only a default 0.0.0.0.0/0 address and therefore its next hop from the provider router. And how can I change the default path with pbf? there I can only define a next hop.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!