09-07-2024 07:18 PM
I have two ISP connected to my firewall.
1. ISP1 is in untrust zone and default route configured metric value is 10.
2. ISP 2 is in WAN1 zone and default route metric value is 15.
3. Both ISP are in same virtual router.
I am facing one issue i cannot ping my ISP2 from external.
My home public ip if i enter static route in the palo alto firewall in virtual router point to ISP2 interface then only from my home i am able to ping ISP2.
Configuretion i made in my PA.
1.policy: WAN1 to WAN1 all allowed any any
2. PBF: configured (Source WAN1 source any) (Destinaiton address any) forward to ISP2 interface and enabled the Enforce Symmetric Return
3. NAT: Source WAN1 Destination WAN1 Destination Interface ISP2 interface source any destination any translated to Dynamic IP And Port to ISP 2 interface.
Dear Expert Please help me to solve my issue?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
