Inter-VSYS communication using two vr's, 4.1

oyvind — Wed, 07 Mar 2012 10:08:04 GMT

Hi.

Is it possible in PAN OS 4.1 to send traffic between two VSYS when the interfaces are not in the same vr?

Thanks

Re: Inter-VSYS communication using two vr's, 4.1

rmonvon — Wed, 07 Mar 2012 22:58:33 GMT

Yes, inter-VSYS is possible. Please see https://live.paloaltonetworks.com/docs/DOC-1821. Thanks.

Re: Inter-VSYS communication using two vr's, 4.1

Cesar.pevezFajardo — Thu, 08 Mar 2012 15:57:17 GMT

What about communicating two VSYS internally? I have a backend and a frontend firewalls, i'm migrate them to two vsys in the same physical box. The two firewalls are communicating using a private VLAN, but now that they are going to reside in the same box I want to connect the two VSYS internally. I have the two VSYS configured to see each other, I have two external zones, configured on each vsys, I have two vritual routers, one per each vsys. In the virtual routers I have routes that were configured to send traffic between the two devices, now they have as gateway the next virtual router. I wonder if the vsys will be able to pass traffic to each other through the external vsys. Do I need to configure interfaces of some sort? DO I need a third virtual router to move packets between the two VSYS? Is my configuration going to work?

topic Re: Inter-VSYS communication using two vr's, 4.1 in General Topics

Inter-VSYS communication using two vr's, 4.1

Re: Inter-VSYS communication using two vr's, 4.1

Re: Inter-VSYS communication using two vr's, 4.1