topic Re: May I set the same ip in different interface between two virtual system？ in General Topics

May I set the same ip in different interface between two virtual system？

kylelee — Tue, 04 Mar 2014 07:15:51 GMT

I set ip address 192.168.1.254/24 in the ethernet1 which belong default router in the vsvy1.

I try to set the same ip address in the ethernet2 which belong another VR in the vsvy2.

When I commit, it will display duplicate address.

I just do some lab about vistual system for my client.

But I want to sure may I set the same ip in different interface between two virtual system？

Re: May I set the same ip in different interface between two virtual system？

HULK — Tue, 04 Mar 2014 07:55:51 GMT

Hello Kylelee,

I don't think we can configure the exact same IP address on 2 different interfaces, even though they are part of 2 different VSYS. It will throw you below mentioned error:

Error: duplicate address for interface ethernet1/xx and ethernet1/yy

Error: interface configuration error

(Module: device)

Commit failed

Re: May I set the same ip in different interface between two virtual system？

kylelee — Wed, 05 Mar 2014 04:21:40 GMT

Thanks for your support.

But it's strange, I originally thought that different virtual system shouble be independent system.

Re: May I set the same ip in different interface between two virtual system？

HULK — Wed, 05 Mar 2014 05:07:36 GMT

Hello Kylelee,

Could you please give me some time, i will try to get in touch with product-management team and provide you a valid explanation.

Thanks

Re: May I set the same ip in different interface between two virtual system？

VinceM — Wed, 05 Mar 2014 16:43:28 GMT

Hi all,

It's a known limitation for Vsys. You can't have same IP on different interface (member of diff Vsys).

Re: May I set the same ip in different interface between two virtual system？

mbutt — Wed, 05 Mar 2014 21:32:37 GMT

As per my understanding you can not have the same ip address on two different interfaces. That is the limitation of the system.

However,

Overlapping IP address space requires separate VR/vsys

Ethernet interface can not have same ip interface even in different vsys.

Hope this help.

Numan

Re: May I set the same ip in different interface between two virtual system？

pulukas — Wed, 05 Mar 2014 22:21:31 GMT

This answer is crazy.

Virtual routers exist because we want separation in routing between the devices. Why cripple this ability by preventing a basic function like ip address assignment in different virtual routers.

I hope this is on the near term roadmap to fix. I would classify is buggy behavior.

Re: May I set the same ip in different interface between two virtual system？

hopcio — Tue, 17 Feb 2015 18:17:00 GMT

HI, does anyone know if there is a change regarding this?

Re: May I set the same ip in different interface between two virtual system？

hmcginnis — Thu, 20 Jul 2017 18:23:50 GMT

Just confirmed today. This behavior still exists. IP@ space can overlap between multiple VR's but no two interfaces can have the same IP@... Does not require multiple VSYS, though.

Re: May I set the same ip in different interface between two virtual system？

Remo — Thu, 20 Jul 2017 18:37:46 GMT

In addition: the behaviour still exists in 8.0.2

Re: May I set the same ip in different interface between two virtual system？

AlvarTeearu — Wed, 24 Mar 2021 15:03:02 GMT

in addition vol2: same behaviour in 9.0, 9.1 and 10.0

Re: May I set the same ip in different interface between two virtual system？

sminnick — Mon, 01 Nov 2021 13:32:35 GMT

Still seeing same issue. No fix.

Re: May I set the same ip in different interface between two virtual system？

TomYoung — Mon, 01 Nov 2021 14:30:11 GMT

Hello,

I think if you want PA to fix it, you should give a valid reason. Separate VRs do allow interfaces in the same subnet, which you cannot do on a single VR. For my separate vsys customers, we never assign the same IP address because the vsys are not on an isolated network. We use different IP addresses to route to different firewalls (vsys).

I assume you have a valid design proposed for using the same IP address. I just can't think of any examples now.

Thanks,

Tom

Re: May I set the same ip in different interface between two virtual system？

JacobAn — Thu, 21 Apr 2022 19:44:53 GMT

For us, we have multiple segmented systems that we setup using the same script for IP addressing, but then leverage NAT going into the main network. This way we don't utilize more addresses and the scripts are easier. With this limitation I have to allocate unique addresses for each backend environment with no useful impact to the main network since those addresses aren't visible/published to the main network.