Update routing table based on PING results

[dwharam]

Does anyone know if the PA supports dynamically updating the routing table on a PA FW based on PING results?  Some vendors refer to this as IP SLA.

thanks

Daniel

[reaper]

Hi Daniel

You could set up policy based forwarding with monitoring but this would simply be a yes/no routing decision based on ping reply or timeout

[pulukas]

Palo Alto calls the IP SLA feature "Path Monitoring".  This can be used with a variety of features like virtual routers, Policy Based Routing, VPN or High Availability to control failover scenarios.

Here are two sample configurations.

Dual ISP Branch Office Configuration

How to Configure Dual VPNs with Dual ISPs from a Single PAN to a Remote Site

[hshah]

Hi Dwharam,

Its possible through PBF. In PBF you can configure route failover upon ping response.

Refer following document for PBF configuration, Page 5 has information on Path Monitor which triggers failover of route based on ping.

Policy Based Forwarding

Regards,

Hardik shah