This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About Gabriel.Buldiman
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Gabriel.Buldiman
03-15-2023
1Post
0Likes
0Solutions
Mar 15, 2023Last Visited
User
Activity
User
Profile
Latest posts by Gabriel.Buldiman
| Subject | Views | Posted |
|---|---|---|
| 1436 | 12-17-2020 11:15 PM |
User Badges
Community Statistics
| Member Since | 10-07-2019 07:19 PM |
| Date Last Visited | 03-15-2023 01:11 AM |
| Posts | 1 |
12-17-2020
11:15 PM
We have 2 ISP on our PA-850. We have 1 VR with both ISP set as the default route for primary and backup internet (different metrics) with a static route monitoring failover process. I have configured ISP1 for GP-gateway1 and and ISP2 for GP-gateway2. In this case, I wasn't able to connect to the second GP-gateway. I tried configuring 2 VRs, ISP1 as default route for VR1 and ISP2 as default route for VR2. This way, I was able to connect to both GP gateway simultaneously. How do I do the failover in this scenario? What I want to achieve is, all traffic coming in from internal, ipsec and GlobalProtect regardless of the VR, will forward it on ISP1. If ISP1 will go down, all traffic will shift to ISP2. Found this article https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClU8CAK but it doesnt say anything about failover. Is this doable by using policy based forwarding? if so, how do I configure it on the VRs including the ipsecs and GP tunnels.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
03-15-2023
01:11 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks