Static Route via CLI

[mali77palo]

I have a firewall with multiple Vsys/VRs.  Need to add a static route from one VR to another and I know I can do it via GUI, however I like to use the CLI if possible.  So would this command add the static route from one VR pointing to another?

set network virtual-router VR-Inside routing-table ip static-route 10.10.10.10/32 nexthop next-vr VR-Inside2
set network virtual-router VR-Inside routing-table ip static-route 10.10.10.20/32 nexthop next-vr VR-Inside2

[BPry · Accepted solution]

That command should work perfectly fine. I would probably make sure to run validate full command after making the changes to make sure that the configuration is going to be valid, but I don't see why you would have any issues with the commands themselves. 

[mali77palo]

Thank you, is it possible to see it int he config after typing in the command or a similar route that already exists?  For instance in the Cisco ASA I can see the existing routes by piping the command.  I know with Palo I can pipe with the match argument.  But what can I type before show deviceconfig | match 10.10.10.10?

[TranceforLife · Accepted solution]

> show config running | match x.x.x.x

I personally prefer to use GUI when working with Palo as this is one of the beauty of this device:-)