topic Re: VM-Series License limits - VIrtual Routers in VM-Series in the Public Cloud

VM-Series License limits - VIrtual Routers

Retired Member — Thu, 28 May 2020 16:06:35 GMT

I have seen documentation outlining the differences in the number of Rules, VPNs, sessions and zones for each VM-Series license, but i think there are also limits on the number of Virtual Routers you can create on each VM license.

Is there any documentation to illustrate this difference?

This is necessary information if you are deploying the Load Balanced Transit VNet and you may need more than 2 Virtual Routers.

Thanks.

Re: VM-Series License limits - VIrtual Routers

dmaynard — Thu, 28 May 2020 16:26:08 GMT

Keep in mind that before licensing VM-Series the no-license VR limit is 2.

https://www.paloaltonetworks.com/products/product-comparison.html?chosen=vm-100,vm-300,vm-500

Virtual routers	20	10	3

Re: VM-Series License limits - VIrtual Routers

jmeurer — Thu, 28 May 2020 16:29:10 GMT

The VR limit per license type can be viewed here.

https://www.paloaltonetworks.com/products/product-selection.html#

The limit on a VM-300 is 10 VRs. With that said, you generally shouldn't need more than two. You should route all internal traffic through the same interface with the HA Port LB. If you try to Zone Policy that traffic, you will need SNAT. Azure maintains persistence on a 1-arm routing mode only. We touch on this in the East-West component of the reference architecture.

https://www.paloaltonetworks.com/resources/reference-architectures/azure

Re: VM-Series License limits - VIrtual Routers

Retired Member — Thu, 28 May 2020 16:42:27 GMT

I have seen and followed the Reference Architecure guides and they are very helpful. When i was testing it out, i had a VM-100 license, i was pretty sure it limited me to two Virtual Routers, but this comparison tool, says it allows 3. Can you confirm it is 3?

The only reason i ask, is we have a customer that deployed their VM-Series with a Untrust, Trust and VPN segments, and three Load Balancers. A Load Balancer on each segment.

So with that i was thinking it would be best to have a Virtual Router for each segment so that the Probes from the Azure Load Balancer are routed back to the LB.

Anyways, if you are able to confirm that the VM-100 supports 2 or 3, that would be great.

Thanks,

Re: VM-Series License limits - VIrtual Routers

Eslam_Sayed — Wed, 06 Oct 2021 18:45:07 GMT

Hello all, is there any link to determine max no of VR Per each hardware appliance? Thanks in advance