topic Re: Virtural router how many do have and when to have multiple in General Topics

Virtural router how many do have and when to have multiple

Alex_Samad — Sat, 12 Sep 2020 05:23:14 GMT

So I am doing some network segregation.

I have vr with say 40 interfaces on it.

I want to add 3 more.

can i create a new vr (vr_b)

place the 3 interface on the new vr (vr_b) and then create a vlan to connect vr original (vr_a) to new vr (vr_b)

When do you create a new vr ?

And what is the down side.

Re: Virtural router how many do have and when to have multiple

Abdul-Fattah — Sat, 12 Sep 2020 23:15:06 GMT

Hi,

you can have as many interfaces in a VR as you want.
You create another VR when you want a another Routing instance, like vrfs. Down side if not needed, another VR makes things more complex for not reason.
and no you can not connect VRs togather with a vlan. But if you want a VR to reach a network found in a another VR then you create a static route for that network and make it point to the next VR.

Re: Virtural router how many do have and when to have multiple

Alex_Samad — Sun, 13 Sep 2020 03:03:03 GMT

So get the complexity bit

Doesn't really explain how inter router comes happens. Can I connect them to do OSPF or BGP

Do they have to share a phy interface or ?

Re: Virtural router how many do have and when to have multiple

SutareMayur — Mon, 14 Sep 2020 10:48:19 GMT

@Alex_Samad,

Normally you need multiple VRs to have a separate set of routes which you do not want to share between VRs, also you can configure different routing types for different interfaces.

As explained by @Abdul-Fattah , If you want to reach subnet on VR1 from the subnet on VR2, you can add static route on respective VRs and mention next hop as a NEXT VR. Yes you can also have OSPF or BGP neighborship between two VRs. Below are ref. articles.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clz7CAC#:~:text=OSPF%20can%20be%20used%20for,static%20routes%20to%20its%20neighbor.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClIpCAK

Re: Virtural router how many do have and when to have multiple

Alex_Samad — Mon, 14 Sep 2020 21:37:17 GMT

had an indirect chat with PA engineer. Seems like the linkage between VR is not that good.

Best to just keep it all in 1 VR.

The doco is not very clear on this.

Re: Virtural router how many do have and when to have multiple

aleksandar.astardzhiev — Tue, 15 Sep 2020 10:49:55 GMT

If you don't understand the purpose of having multiple virtual routers this means that you really don't need it.

@Abdul-Fattah in most case you are correct, but in regality every device has its limit for how many interfaces you can have per device. Here you can see comparation between the some of the low end devices - https://www.paloaltonetworks.com/products/product-comparison?chosen=vm-50,pa-220,pa-850 and look for "Max interfaces (logical and physical"

Re: Virtural router how many do have and when to have multiple

MP18 — Tue, 15 Sep 2020 15:30:17 GMT

@Alex_Samad

It depends on the environment as in our case we have different Segregated networks and also IPSEC tunnels and we have different

VR for them.

So far never saw any issues for Routing between VR's

Regards