Using ECMP and path monitoring

[VinceM]

Hi all,

Does anybody try to configure ECMP ?

I did and it works perfectly.

Only one question: on which condition, palo stop sending traffic through one of the ECMP gateway ?

I tried many config but the only one working is to shut the palo interface.

Mean there is no path monitoring ? 

Waht's happen id the telco link is done ?

What's happen is gateway are not directly connected to the palo ?

Anybody have a solution ?

Rgds

V.

[cpainchaud]

ECMP and static routes are the devil unless next hop are using 2 VRRP/HSRP and they never fail. If not possible then go for Dynamic Routing

[VinceM]

Hi

I agree with you but for sure Palo guy have not implement this feature without thinking we need to monitor access ... I hope.

Rgds

V.

[cpainchaud · Accepted solution]

if you ping a host then what about return packet ? nothing answer it will come back through the same gateway. If it's the case then you may deactivate the gateway is really working.

[VinceM]

Hi,

Thx for all info.

Mean ECMP with static routing is not usable. Maybe with dynamic it make sense ....

V.

[r3dp1ll]

Can't believe that. Some customers have unstable links. For that scenario, to monitor the connections instead of the link state is fundamental.

I will keep searching for a solution to this issue without excluding the use of ECMP, but the result so far is not good.

[cpainchaud]

ECMP is not link/load sharing , what I read here is all but the use case of ECMP