topic Re: 2 LANs are not reachable to eachother in Next-Generation Firewall Discussions

2 LANs are not reachable to eachother

majidsolehri — Tue, 30 Sep 2025 05:07:50 GMT

In Palo Alto Firewall, we are facing an issue. we have configured 2 LANs and 2 WANs. working fine even load balancing also works.
But LANs cannot ping/reachable with eachother. even both lans having internet access.
How can we configured that LAN can reachable with eachother and rest of configuration remain same.

Thanks

Re: 2 LANs are not reachable to eachother

reaper — Tue, 30 Sep 2025 08:31:52 GMT

did you use 1 single virtual router for all 4 networks?

in that case all you need to do is create a rule that allows traffic from one lan to the other, and a rule in the opposite direction

both for the app-id 'ping'

if you used 2 separate Virtual Routers, you will need to create routes for the 'distant' network (i.e. on VR1, create a route for LAN2, next hop VR2. on VR2 create a route for LAN1 next hop VR1)

Re: 2 LANs are not reachable to eachother

majidsolehri — Wed, 01 Oct 2025 05:10:24 GMT

We are using single virtual Router also add policy on top LAN1 to LAN2 and vice versa but still both LANs are not reachable.

Re: 2 LANs are not reachable to eachother

RH747 — Mon, 06 Oct 2025 15:27:25 GMT

What have you seen when reviewing the traffic logs? How did you structure the allow policy?