Template variable in PBF?

[Anbjorn]

Is it possible to use a template variable in the PBFs next hop ip address field?

PBF variable

Using 9.0.11

[reaper · Accepted solution]

Hi

unfortunately that's not possible

may want to each out to your SE to submit a feature request

[O.Rietbrock]

Hello,
I have looked into the same issue and figured a work around with a FQDN and DNS Proxy setup.
1. Setup DNS-Proxy

2. Bind DNS Proxy on a Loopback interface

3. Configure Inheritance Source to "none"

4. Set Primary and Secondary to your mgmt DNS servers
5. Create static entry to respond to an unresolvable FQDN and set variable to your ISP gateway IP.

6. Configure Device -> System -> Services -> DNS = DNS Proxy Object & set the DNS-Proxy

 - DNS-Proxy uses the Data Plane Routing -> implement NAT- and Policy Rules to redirect DNS through VPN or public routing accordingly

7. Test the DNS resolving to the ISP IP/FQDN mapping

 - Note: Check local Firewall Device Services Overwrite settings.

8. Configure PBF policy using FQDN as next-hop.

Important note:

DHCP is also not supported by this solution.

PBF monitoring does not support FQDN either.

Solution is SD-WAN licensing for proper PA support.