- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
06-24-2016 07:02 AM - edited 06-24-2016 07:05 AM
What is the purpose of adding destination in service route?
We have a default gateway in management interface config and we also have specific route in vr so why we need it?
06-24-2016 07:21 AM
All requests that go out from firewall (URL category check, DNS requests, content updates, Wildfire etc) go out from management interface by default.
In some environments management interface connects to management network that has no access to internet.
Route entries that are in virtual router do not apply to traffic that goes out from management interface.
06-24-2016 07:38 AM - edited 06-24-2016 07:51 AM
Hi,
There you go :
So by default for all traffic that generated by the device itself, Palo will use mgmt interface and default gateway configured on the management interface settings. By default it will NOT use the default gateway configured on the VR or source IP configured on the interfaces. You need to specify this using "service route" settings.
Cheers
06-24-2016 07:53 AM
In simple words:
By default for the services defined under service route tab" management interface " is used.
You can chnage this for the defined services via service route tab
But there will be some other non defined services( i believe which might som other logs) , for those we need destination.
But some one needs to clarify this:
So if we define any destination address in service-route tab, how routing happen?
Is it something like: first it will make sure the traffic is orginated using the source interface we mention then routing table entries.
Please explain
06-25-2016 08:35 AM
Roby,
May be some services which are not show in the service we can have destination route for that service I guess.
Regards
HSingh
06-26-2016 10:49 PM
For that routing is fine right
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!