topic Re: Virtual Systems Shared Gateways in General Topics

Virtual Systems Shared Gateways

alexander_conn — Tue, 16 Jul 2013 04:04:04 GMT

Is it possible to have multiple shared gateways when running virtual systems.

I'm essentially trying to have 1 physical interface, shared among virtual systems, with an IKE gateway configured on it, so I can have multiple IPSec VPN tunnels established on that interface (the tunnel interfaces will belong to different virtual systems). And another physical interface, shared among virtual systems, for internet connectivity. Is this possible?

Re: Virtual Systems Shared Gateways

UhMayYeah — Tue, 16 Jul 2013 08:50:14 GMT

Yes it is :

Confirmation :Ref : VSYS Shared Gateway Capacity Matrix

For Config Assistance :

Virtual Systems (VSYS)

Configuring Destination NAT with a VSYS with Shared Gateway

How to Set Up Shared Gateway and Inter VSYS

Re: Virtual Systems Shared Gateways

alexander_conn — Tue, 16 Jul 2013 10:09:01 GMT

Thank you

Re: Virtual Systems Shared Gateways

nextgenhappines — Tue, 16 Jul 2013 13:40:31 GMT

Just words of cautions..

1. If you are planning to use VSYSs with shared gateway, The zone protection policy needs to apply on the shared gateway interface, you cannot apply it on the untrust external zone within the vsys because the untrust zone is a logical zone, it does not have a interface tied with the untrust zone inside the vsys. The problem is you will lost the ability to define specific zone protection setting per vsys, instead you will need to define a much higher setting on the shared gateway from the untrust to your trusted network, which completely defeat the purpose of vsys, that allow you to create vsys with specific setting without affect other vsys..