Direct Internet Access to bypass Secure Fabric

[BradleyWeatherill]

Hello,

We're working on configuring Direct Internet Access for our VOIP subnet across multiple locations, allowing the traffic to bypass the secure fabric and go directly to the internet. However, we are unsure how to do this.

Here is some information:

Gateway settup on port 3 of an Ion

Static route:

Dest Prefix: 10.10.10.0/24

Scope: Local

Next Hops:

     admin_distance: 1

     nexthop_interface: N/A

     nexthop_IP: 1.1.1.1 (internet gateway)

     self: false

Path Set:

Network Context: none

Src Prefix: 10.10.10.0/24

Dest Prefix: 1.1.1.1

Apps: any

paths:

     Active Path: Direct on Any Public

     Backup Path: none

user/groups: Any

Service & DC Groups: None

Two other path rules are below this for our Secure Fabric connections.