Question about vlans/Router on a stick.

cengasser — Tue, 02 May 2017 18:22:34 GMT

I'm looking to configure a Palo as a router on a stick for a site to replace a decrepid Cisco 1811r router. The only printed information I can find is a 4.x document with pretty dissimilar UI images.

I've configured mutliple subinterfaces underneath my primary trusted interface, each one is tagged with the vlan tags being used on the L2 switches, and all are bound to the virtual router. The connected switch interface will be trunked.

Do I need to actually define unique Zones, or like Tunnels, can I just put them all in the "Trusted" Zone if I don't care about intervlan security?

Thanks.

Re: Question about vlans/Router on a stick.

Raido_Rattameister — Tue, 02 May 2017 20:22:26 GMT

You can put them into single zone.

If you permit traffic from Trust zone to Trust zone then no further policy is needed then.

topic Re: Question about vlans/Router on a stick. in General Topics

Question about vlans/Router on a stick.

Re: Question about vlans/Router on a stick.