topic Re: Virtual router and its default one in General Topics

Virtual router and its default one

kevinospf — Sun, 06 Aug 2023 14:37:08 GMT

Hi, In each palo alto, there is default virtual router. We can create ourself virtual router. When we created a new virtual router in this PA, what is relation and difference between the defaul virtual router and the created virtual r? Can we say if routes cannot find destination in the created virtual router, then the routes will go to the default virtual router? Thanks

Re: Virtual router and its default one

seb_rupik — Sun, 06 Aug 2023 21:08:18 GMT

Hi there,

It is only 'default' in respect to it being present in the factory shipped config. Don't think of it as a default route which can be used when all other routing options are exhausted.

Virtual Routers are logically separate, if you want the traffic to flow between them then you must explicitly configure it.

Incidentally, you can delete it or call it something totally different, the name 'default' is arbitrary.

cheers,

Seb.

Re: Virtual router and its default one

kevinospf — Mon, 07 Aug 2023 02:50:28 GMT

@seb_rupik Thanks for your reply! so can we say there is no difference between the original "default" (virtual router) and virtual router that we created functionally?

Re: Virtual router and its default one

seb_rupik — Mon, 07 Aug 2023 07:57:48 GMT

Hi there,

Correct. The 'default' VR is safe to delete (once you have removed all the associated configuration such as attached L3 interfaces) and replace with something else. It being called 'default' does not give it any special properties.

cheers,

Seb.

Re: Virtual router and its default one

kevinospf — Mon, 07 Aug 2023 13:32:26 GMT

Thanks! One more question, what is relation between several virtual routers in one PA? can we say they are working like each vrf in cisco router?

Re: Virtual router and its default one

seb_rupik — Mon, 07 Aug 2023 13:38:55 GMT

Yes the concept of a VR is the same as a Cisco VRF. On the subject of platform virtualisation there is also the vsys, which is similar to a VDC/ security context.

Re: Virtual router and its default one

kevinospf — Mon, 07 Aug 2023 14:33:31 GMT

Thank you!