topic Re: Inter-routing between diffrent Virtuel Router in General Topics

Inter-routing between diffrent Virtuel Router

hamza-zidane — Mon, 16 Apr 2018 09:20:56 GMT

Hi Brothers,

Plz help me, i have a scénario wich i must configure every interface with its own Virtuel router, and i need to make routing between this virtuel router.

Ex:

Ethernet1/1 has VR1

Ethernet1/2 has VR2

How i can make routing between VR1 & VR2 ??

plz your help

Re: Inter-routing between diffrent Virtuel Router

Remo — Mon, 16 Apr 2018 10:27:54 GMT

Hi @hamza-zidane

Simply add routes where you choose "Next VR" as next hop and then ypu choose the coresponding VR.

Regards,

Remo

PS: the big question is: why do you need to do that? If you need routing between these interfaces this separation will only add operational burdens but no additional security.

Re: Inter-routing between diffrent Virtuel Router

TerjeLundbo — Mon, 16 Apr 2018 12:39:58 GMT

I have been told that inter-VR traffic is slow, and that if you need good performance it is best to run such traffic via an external switch. I don't know if this is still the case in PAN-OS 8.

Re: Inter-routing between diffrent Virtuel Router

hamza-zidane — Mon, 16 Apr 2018 15:14:29 GMT

hi @Remo

Thank you very much brother for ur reply, i need this design because i have 2 ISP Provider, and i must use it redondancy, and i have to configure the globalprotect in this dsign.

for more information you can see this video : https://www.youtube.com/watch?v=0jUcZ9ISVwk

Re: Inter-routing between diffrent Virtuel Router

Remo — Mon, 16 Apr 2018 15:52:13 GMT

Are both ISPs equal (bandwidth, service level, ...)?

Re: Inter-routing between diffrent Virtuel Router

BPry — Mon, 16 Apr 2018 17:11:35 GMT

@hamza-zidane,

I don't think that's going to be the easiest way to configure what you are looking for, which is what @Remo is fishing for I think. What you're currently doing is going to work obviously, but it gets really messy and becomes a nightmare to document properly.