topic Re: PBR Question in Firewall and Security Management

PBR Question

FWNinja — Thu, 12 Sep 2019 14:29:13 GMT

Hi all,

I configured a pbr with two gateways.

Related to it, I would like to know the behaviuor of a pakcet matching this pbr.

For example, a PC tries to go to the internet. This traffic matches PBR mentioned above with 2 gateways configured. What is the behaviuor?

Will this PC use always the first configured gateway? Or it can use, in other/next communication, the second configured gateway?

Thanks and Best Regards

Francesco

Re: PBR Question

G_W_Albrecht — Thu, 12 Sep 2019 14:31:00 GMT

As already suggested, have a good look into this : sk100500: Policy-Based Routing(PBR) on Gaia OS

Re: PBR Question

FWNinja — Thu, 12 Sep 2019 14:34:35 GMT

Hi,

I already read this sk but I cannot find anything relevant about my question

Thanks and Best regards

Francesco

Re: PBR Question

Nüüül — Thu, 12 Sep 2019 16:40:11 GMT

When adding a gateway, you will set a priority to it. Then the gateways will be used in this order. Saying this you will end up in normal routing using gateways with priorities. the best prioritized gateway will be used.

priority - Assigns a path priority when there are many different paths. The available path with the lowest priority value is selected

https://dl3.checkpoint.com/paid/66/66182c024f13c0817e8040dc218a4d72/CP_R77_Gaia_AdminGuide.pdf

not sure if it is possible to set multiple gateways with same priority... if, i wouldn´t do that, because of asymmetric routing and so.

Re: PBR Question

PhoneBoy — Thu, 12 Sep 2019 18:10:34 GMT

That's called Equal Cost Multipath (ECMP) which I know is supported for non-PBR routes