topic Re: How to solve overlaping IP addresses for configuration with Shared Gateway and multiple Virtual Systems in General Topics

How to solve overlaping IP addresses for configuration with Shared Gateway and multiple Virtual Systems

Pawel — Wed, 25 Sep 2013 15:16:21 GMT

Hi,

Do you know, how this problem can be solved?

Can we use separate Virtual Routers per each Virtual System?

Best Regards

Pawel

Re: How to solve overlaping IP addresses for configuration with Shared Gateway and multiple Virtual Systems

kadak — Wed, 25 Sep 2013 15:41:25 GMT

Hello Pawel,

Yes. Multiple VR with multiple VSYS is the way to go.

I was able successfully commit the following configuration:

And was NOT able to commit this configuration:

So, if you configure different VSYS with different VR, you should be able to configure different interfaces with overlapping subnets.

Hope that helps!

Regards,

Kunal Adak

Re: How to solve overlaping IP addresses for configuration with Shared Gateway and multiple Virtual Systems

Pawel — Wed, 25 Sep 2013 22:58:11 GMT

Thanks for your reply! Your answer is helpful but I meant other thing. Let say I have a few Virtual Systems that represent separate clients and each of the users has a common interface for external communications. This is solved by Shared Gateway and single Virtual Router is used to route the traffic for all of the Virtual Systems through the Shared Gateway. What if the users use overlapping addresses. Can we also use separate VR for each VSYS in this case?

Best Regards

Pawel

Re: How to solve overlaping IP addresses for configuration with Shared Gateway and multiple Virtual Systems

mbutt — Mon, 30 Sep 2013 15:24:08 GMT

Here is a doc that explains that it is not allowed.

https://live.paloaltonetworks.com/docs/DOC-2161

Hope this helps.

Thanks

Numan