Static Routes for Subinterface

[TNethery]

I have a question about static routes for subinterfaces for my ethernet1/2 interface, I currently have static routes for interface ethernet1/2 to access some remote servers, but many of my subinterfaces of ethernet1/2 also need the ability to access these remote servers. Do I need to create a static route for each subinterface (Example Ethernet1/2.101, etc)  or will the static route for ethernet1/2 cover that? 

[OtakarKlier]

Hello,

Are these L2 or L3 interfaces? For my L2 sub interfaces, I have separate vlans and they do require routing such as the following:

What this does is tell the virtual router to send any traffic destined for that subnet to the proper interface, etc.

Hope this helps.

[TNethery]

Currently, my subinterfaces are Layer3 under ethernet 1/2 with tags assigned, I am trying to upgrade from a unifi environment and trying to translate how there vlan's and static routes were configured in there to a Palo.

[TomYoung]

Hi @TNethery ,

You could also leave the interface blank as long as you configure a next hop.  The virtual router will use the route table to determine the egress interface.

Thanks,

Tom

[TNethery]

Thanks for the suggestion but when I try to commit with None in the interface I get "Cant fint interface in 'default' for next hop Ip (Module: routed) client routed phase 1 failure" 

[TomYoung]

Hi @TNethery ,

Is your next hop in a subnet that is directly connected to the NGFW?

Thanks,

Tom