topic Re: Why would someone use "Next VR" for next hop? in General Topics

Why would someone use "Next VR" for next hop?

mksherman — Sat, 07 Jan 2017 00:10:07 GMT

When creating a static route on one virtual router. What would be an example of why you would choose "next vr"?

Re: Why would someone use "Next VR" for next hop?

TranceforLife — Sat, 07 Jan 2017 06:42:28 GMT

Hi,

Next-VR: to forward traffic to a destination that is not in the local VR but another VR Used often when dealing with Multiple VSYS scenario, where each VSYS has its own VR.

https://live.paloaltonetworks.com/twzvq79624/attachments/twzvq79624/ConfigurationArticles/1322/1/Understanding%20Virtual%20Router%20and%20Virtual%20Systems%20v1.pdf

Re: Why would someone use "Next VR" for next hop?

BPry — Sat, 07 Jan 2017 14:48:48 GMT

@TranceforLife is right, it's only meant to be used in a multivsys enviroment. Once you have multiple VSYS there are plenty of reasons that you would want to route traffic to another VSYS.

If you only utilize a single VSYS then you still might have it broken up so different buildings have their own VR; but usually if you were going that route then it's easier to just make the building it's own VSYS.

Re: Why would someone use "Next VR" for next hop?

santonic — Mon, 09 Jan 2017 07:05:42 GMT

It's useful for scenario with IPSEC redundancy on FW with mutliple ISPs. Set a VR for each ISP and one for local networks. And then use intra VR routing for traffic between them.