topic Re: How to do communication between virtual routers? in General Topics

How to do communication between virtual routers?

ghostrider — Tue, 11 Oct 2016 11:23:47 GMT

Hello Experts

I have two virtual routers configured on firewall. I would like to do exchange routes between virtual routers. How many ways I have - to do that other than just using static routes?

Re: How to do communication between virtual routers?

BPry — Tue, 11 Oct 2016 17:35:44 GMT

If your looking to pass traffic between VRs then you need to setup the static routes that would allow you to do so; if you don't have a reason to seperate out your network traffic I'm a little confused why you would use multiple VRs in the first place.

Re: How to do communication between virtual routers?

ghostrider — Thu, 13 Oct 2016 08:17:27 GMT

Hello

I want limited communicated of specific routes between VR. Thats why inter-vr communcation is required.

Thanks

Re: How to do communication between virtual routers?

BPry — Thu, 13 Oct 2016 14:16:54 GMT

Gotcha, static routes are going to be the only way to accomplish this. Set the static routes and create the relevent security policies and you'll be good to go.

Re: How to do communication between virtual routers?

ghostrider — Fri, 14 Oct 2016 12:15:11 GMT

Thanks dear. Actually I have the scenario like in firewall I have two VR, VR-1 for one customer-1 and VR-2 for other customer. Both have same subnets (overlapping subnets) but going to internet from global table (trust-vr) interface (connected to internet router and doing the NAT). In Juniper SRX, the session is bind to VR. So if traffic is going from VR-1 to global table then reverse route lookup happens in VR-1 and global table does not need to have reverse static routes for VR-1 and VR-2. It seems Palo Alto firewall session is not bind to any VR.

Since VR-1 and VR-2 sharing same subnets. How can I define the reverse static routes in trust-vr for VR-1 and VR-2. Should I enable symmatric retrun? or any other solution