topic Re: Multiple vsys share one pair of WAN circuits? in Next-Generation Firewall Discussions

Multiple vsys share one pair of WAN circuits?

ZNetEng — Thu, 01 Jun 2023 00:06:08 GMT

I have 4 vsys that are currently using individual ports to connect to the WAN circuits. I need to free up ports for additional vsys, and would like a shared circuit port for the multiple vsys to use. I've tried a layer 3 interface with sub interfaces, one for each vsys, tagged vlans 11,12,13,14 for example, trunked to a switch, but I'm getting packet loss with that method. Is there another preferable way to configure this to share a single interface?

Re: Multiple vsys share one pair of WAN circuits?

TomYoung — Thu, 01 Jun 2023 02:19:33 GMT

Hi @ZNetEng ,

You could try a shared gateway -> https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/virtual-systems/shared-gateway.

Another idea is to use QoS to limit the bandwidth on the sub-interfaces, but I can't remember if you can apply QoS to sub-interfaces.

Thanks,

Tom