topic Re: virtual router to virtual router communication in General Topics

virtual router to virtual router communication

paloaltouser2020 — Sun, 19 Jul 2020 14:14:29 GMT

i'm using vm series, and i have 2 virtual routers, each of them has it's own lan and wan

how can i make the lans connect to each other?

i've tried to do static routing but the traffic doesn't go through. what's the correct way to do that?

thank you

Re: virtual router to virtual router communication

Remo — Sun, 19 Jul 2020 22:30:14 GMT

Hi @paloaltouser2020

You already used the correct way. Did you configure the static routes for each LAN on bothe virtual routers and did you also configure a security policy that allows the connection between the LANs?

Re: virtual router to virtual router communication

MP18 — Mon, 20 Jul 2020 03:02:09 GMT

@paloaltouser2020

As Remo mentioned each LAN need static route to each other and next hop will be the VR.

For example if LAN 1 has VR 1 and it need to communicate to LAN 2 which is on VR2 then on VR1 you need this static route

VR1 config

Destination LAN2

Next Hop Next VR

Select VR2

Same thing you need to do on VR2.

Also as mentioned by Remo you need security rules is both directions.

Please check Traffic logs for more info

Regards

Re: virtual router to virtual router communication

paloaltouser2020 — Mon, 20 Jul 2020 05:24:17 GMT

so just to check myself

vr1 lan 192.168.50.1/24

vr2 lan 192.168.60.1/24

vr1 static route

destination 192.168.60.0/24 next hop 192.168.60.1?

and vr2 the same but for 50?

Re: virtual router to virtual router communication

MP18 — Mon, 20 Jul 2020 13:56:16 GMT

@paloaltouser2020

vr1 static route

destination 192.168.60.0/24 next hop choose Next VR name and below that tab

choose Vr2

And do same for Routing from VR2 to VR1

Regards

Re: virtual router to virtual router communication

paloaltouser2020 — Mon, 20 Jul 2020 14:00:14 GMT

yeah you right. i've noticed it later after i wrote to you. thank you 🙂

Re: virtual router to virtual router communication

johnlinkowsky — Tue, 06 Oct 2020 19:22:22 GMT

How does this work when each VR is OSPF? Is there any docs showing how to configure VR to VR communication on a SINGLE vsys. Each VR is using OSFP to route "outside" to respective networks, but need to talk to EACH OTHER via the FW. How do we do this?