Need a setting to change interfaceMetric 1 to a higher value

[basinilya2]

Hi Community.

Every time when GP connects it sets its interfcaceMetric to 1. However, I have a nested VPN with even higher priority so every time I have to manually change the PANGP interface metric to a higher value e.g. 400. My wired connection already has metric 8500.

Do you know if there's a setting for that?

[BPry · Accepted solution]

@basinilya2,

Assuming that you don't actually manage the GlobalProtect environment and you already have permission to do so locally on the endpoint, why wouldn't you just use a script to do this when you connect? Look into post-vpn-connect and run a post connection script locally if just running the script manually doesn't suite your needs, but this isn't something GlobalProtect just natively supports modifying. 

[phbrown]

@basinilya2,

Rather than trying to configure a lower metric metric, you can create more specific routes.  More specific routes takes precedence over metrics.  So if the GlobalProtect has the subnet of 10.0.0.0/8, creating the more specific static routes of 10.0.0.0/9 and 10.128.0.0/9 will give it precedence.