Stop routing if PBF monotoring is down PA-500

[James_D]

 First post to this forum!

I have a PA-500 and 3 ISPs. 2 of the 3 VLANs are forwarded using PBF (VLANs 10 & 30 ) and the third uses the default route (VLAN 20).

My (simplified) configuration is as follows;

 VLAN10 - PBF to ISP 1 fail-over to default if the monitor address is unreachable. <- This is working OK

VLAN 20 - No PBF, direct to the default route  (ISP 2). <- This is working OK

VLAN 30 -  PBF to ISP 2 wait recover and disable if unreachable 

If ISP 2 goes down I want to prevent VLAN 30 from being routed to another ISP. I have created another PBF rule below this one to 'discard'. Is this the correct configuration to achieve this or is there another way this should be configured?

[tac.in · Accepted solution]

Hi James ,

Create a PBF policy for VLAN 30 to route through ISP2 and monitor unchecked.

Regards,

Ram

[James_D]

It really was that simple. Thank you!