topic Re: Searching a Howto for two ISP Connection and two Lan in General Topics

Searching a Howto for two ISP Connection and two Lan

clonesheep — Wed, 18 May 2016 12:36:01 GMT

Hello,

i seach a HowTo for configuration two different ISP connections and two different LANs. Both should nothing to do with eatch other. They should be seperate. Is there any where a HowTo for this configuration? I only found twi isp connection for use with Backup connection but nothing for user bothe with different networks.

I use a PA200 for this and port 1/4 and 4/4 are my isp. help me to find a good and easy work manual or howto.

Re: Searching a Howto for two ISP Connection and two Lan

kiwi — Wed, 18 May 2016 13:04:27 GMT

Hi,

I think this can help you :

https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-ISP-Redundancy-and-Load-Balancing/ta-p/58361

I believe you want 'Example 1: Load balancing with no backup' from the above link.

Hope it helps.

-KiWi.

Re: Searching a Howto for two ISP Connection and two Lan

clonesheep — Wed, 18 May 2016 13:36:15 GMT

No,

I want two separate isp and to each his own lan. no load balancing and so one. only two separate ways outgoing and two input.

Re: Searching a Howto for two ISP Connection and two Lan

kiwi — Wed, 18 May 2016 14:06:06 GMT

I believe Example 1 describes this. (using Load Sharing ...no balancing).

If this is not what you need then you might want 2 different VRs or multi-vsys (one for each ISP) ... this will completely seperate your LANs.

Multi VSYS is not supported on PA-200... but mutiple VR is supported (upto 3 on a PA-200).

VR1 for ISP1 and LAN1

VR2 for ISP2 and LAN2

Cheers !

-KiWi.

Re: Searching a Howto for two ISP Connection and two Lan

clonesheep — Wed, 18 May 2016 14:23:58 GMT

Ah yes.

I think this will it be with

VR1 for ISP1 and LAN1

VR2 for ISP2 and LAN2

so now i need a very easy guid to configure it. I am a nooby litte starter with PA and PAN OS...

Re: Searching a Howto for two ISP Connection and two Lan

reaper — Wed, 18 May 2016 14:35:53 GMT

please take a look at the 'getting started' series of articles, they'll help you through the stages of setting up your firewall

the layer3 one will hekp you set up routing between 2 interfaces, if you repeat that step for the second VR, you should be good to go

Re: Searching a Howto for two ISP Connection and two Lan

clonesheep — Thu, 19 May 2016 11:35:04 GMT

Hi,

reaper that are nice how tos.

my question now. i have now VR1 and VR2 . can i take both via one untrust and one trust nework zone or must i build for every one a sperate network zone?

And policies then for every virtual router a policie?

Re: Searching a Howto for two ISP Connection and two Lan

reaper — Thu, 19 May 2016 13:54:45 GMT

I would recommend using a unique zone-name for each as that will allow you to retain more control and not accidentally open access. this will also allow you to view more easily which traffic is being generated by each set of zones and build reports for both separately