Tuesday, January 8, 2019

Palo Alto Firewall: Adding A Static Route In CLI

Real quick, I think this is useful for adding a lot of static routes into a Palo Alto.  SSH in and do this in CLI and type "configure".  Then type out the following:
set network virtual-router [name of virtual router i.e. default] routing-table ip static-route [name of route i.e. Shanes-Route] admin-dist 10 destination [network/subnet mask i.e] interface [name of interface to be used outgoing i.e. ethernet1/1] nexthop ip-address [next hop ip i.e.]

Add 50 or so of them from notepad at one time, then type in "commit".  

1 comment:

  1. Thanks! Very useful and exactly what I was looking for during a large migration-job to be done.


Your comment will be reviewed for approval. Thank you for submitting your comments.