topic Default router in interface config in General Topics

Default router in interface config

kevinospf — Sat, 05 Aug 2023 02:02:49 GMT

When an interface of PA is assigned an virtual router, even if the virtual router is just created without any other route configuration such as static route, ospf etc, the interface still can start to work(be able to ping its connected neighter device), right? so what is virtual router for in this situation?

Re: Default router in interface config

Mick_Ball — Sat, 05 Aug 2023 09:03:49 GMT

In that situation... you do not need a VR, your firewall will know how to get to the neighbor as it is locally attached. if the network you are trying to connect to is not locally attached to the firewall then the VRouter/OSPF/Static routes etc will tell you how to get there...

Re: Default router in interface config

kevinospf — Sat, 05 Aug 2023 12:45:14 GMT

@Mick_Ball wrote:

In that situation... you do not need a VR, your firewall will know how to get to the neighbor as it is locally attached.

No, the device connected to PA physically cannot ping the PA if no virtual router is created and associated with the interface connected to the device

Re: Default router in interface config

seb_rupik — Sun, 06 Aug 2023 21:23:17 GMT

Hi there,

The Virtual Router provides two important system objects, the RIB and FIB. Even with a single interface both of these tables would be populated with information which would instruct the system kernel how to forward packets. I'm no linux kernel expert but without these two tables I'd wager that any Layer 3 function would cease to operate.

cheers,

Seb.

Re: Default router in interface config

Mick_Ball — Mon, 07 Aug 2023 10:28:42 GMT

yes of course... aplogees for misleading info... it was more of a L3 connection in general and assumed by the original post that it was possible...