Monday, October 29, 2018

Blackhole traffic on Palo Alto

I have a firewall that has a bunch of static routes with the next hop of things in the 1.1.1.x/24 range (it's a different public IP, but I'm not telling what it is). I need a way to say on the palo alto that if a route does not exist for an IP in that range (e.g 1.1.1.100) then drop the traffic. How do I do this?

Essentially I need the equivalent Palo Alto command of the Cisco command below:

ip route 1.1.1.0 255.255.255.0 null0



No comments:

Post a Comment