Trying to connect two separate networks that share the same IP addresses to a third networking using virtual routers and NAT on PA-440

Joe_Kocan — Thu, 04 May 2023 19:02:18 GMT

We have a bunch of separate video networks that are separate, but use the same IP address space for each. Each is connected to their own dedicated switches and is attached to a couple of hundred cameras and a DVR. We would like to connect these networks to a Palo PA-440 and use virtual routers to accomplish this. Right now I have only two VRs configured and have setup two interfaces each configured with the same IP for two test networks. When I try to commit I get an error that reads:

Error: duplicate address for interface ethernet1/2 and ethernet1/1
Error: interface configuration error
(Module: device)
client device phase 1 failure
Commit failed

I am not used to using virtual routers so I am probably not configuring it correctly. I am wondering if anyone else has successfully configured something similar?

Re: Trying to connect two separate networks that share the same IP addresses to a third networking using virtual routers and NAT on PA-440

OtakarKlier — Thu, 04 May 2023 21:36:39 GMT

Hello,

If the cameras on on DHCP, I would recommend changing the subnets so you dont run into this problem. However this issue is called 'overlapping' where the subnets are the same on both ends. Check out this article that explains it and what to do.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLTlCAO

Regards,

topic Trying to connect two separate networks that share the same IP addresses to a third networking using virtual routers and NAT on PA-440 in Next-Generation Firewall Discussions

Trying to connect two separate networks that share the same IP addresses to a third networking using virtual routers and NAT on PA-440

Re: Trying to connect two separate networks that share the same IP addresses to a third networking using virtual routers and NAT on PA-440