Next-Generation Firewall
Strata Cloud Manager
Table of Contents
Expand All
|
Collapse All
Next-Generation Firewall Docs
-
-
-
-
-
-
-
- PAN-OS 12.1
- PAN-OS 11.2
- PAN-OS 11.1
- PAN-OS 11.0 (EoL)
- PAN-OS 10.2
- PAN-OS 10.1
- PAN-OS 10.0 (EoL)
- PAN-OS 9.1 (EoL)
- PAN-OS 9.0 (EoL)
- PAN-OS 8.1 (EoL)
-
- PAN-OS 12.1
- PAN-OS 11.2
- PAN-OS 11.1
- PAN-OS 10.2
- PAN-OS 10.1
Strata Cloud Manager
Create a static route for a logical router in Strata Cloud Manager using a
destination IPv6 address and next hop IPv6 address.
For a logical router on Strata Cloud Manager, you can create a static route that uses
an IPv6 address for the Destination and an IPv6 address for the Next Hop.
- Select ConfigurationNGFW and Prisma Access.Select DeviceRouting and Add Router.Enter the Name of the logical router.Edit the Static section.In the IPv6s section, Add Static Route.Enter the Name of the static route. The name must start with an alphanumeric character, underscore (_), or hyphen (-), and can contain a combination of alphanumeric characters, underscores, and hyphens. No dot (.) or space is allowed.For Destination, enter the route and netmask (for example, 2001:db8:123:1::0/64). If you're creating a default route, enter the default route (::0). Alternatively, you can select or create an address object of type IP Netmask.Select the outgoing Interface for packets to use to go to the next hop. Specifying an interface provides stricter control over which interface the firewall uses, rather than using the interface in the route table for the next hop of this static route.For Next Hop, select one of the following:
- IPv6 Address—Enter the IP address (for example, 2001:db8:49e:1::1) when you want to route to a specific next hop. You must Enable IPv6 on the interface (when you Configure Layer 3 Interfaces) to use an IPv6 next hop address. If you're creating a default route, for Next Hop you must select IP Address and enter the IP address of your internet gateway (for example, 2001:db8:49e:1::1). Alternatively, you can create an address object of type IP Netmask. The address object must have a netmask of /128 for IPv6.
- Next LR—Select to make the next logical router (in the list of logical routers) the next hop.
- FQDN—Enter a Fully Qualified Domain Name.
- Discard—Select to drop packets that are addressed to this destination.
- None—Select if there is no next hop for the route. For example, a point-to-point connection doesn't require a next hop because there is only one way for packets to go.
Enter the Admin Dist for the static route (range is 10 to 240; default is 10). This value overrides the Static IPv6 administrative distance specified for the logical router.Enter a Metric for the static route (range is 1 to 65,535; default is 10).If you want to use BFD, select a BFD Profile or Create New BFD profile.Add the static route.Save the configuration.