topic Re: Inter VR Routing in General Topics

Inter VR Routing

Chopper — Thu, 17 Dec 2020 11:16:12 GMT

We have a PA 3220 with two VRs, one VR is TEST and the other is VR is PROD.

Each VR has a public facing interface, eth1 is PROD Andy its IP Address is 103.143.195.245/32 and eth2 is TEST with an IP address of 166.206.187.82/32. There are internal and DMZ interfaces that belong to either VR.

I have a requirement for a user on the PROD to access a DEV environment in TEST. I’ve tried adding a static route to each VR making the other VR the next hop for the destination network and this is returning commit error.

has anyone done this before?
both VRs are in the same vsys

Re: Inter VR Routing

SutareMayur — Thu, 17 Dec 2020 12:02:53 GMT

@Chopper Could you please paste the exact error that you are getting ?

Re: Inter VR Routing

Mick_Ball — Thu, 17 Dec 2020 12:37:03 GMT

Inter VR routing is doable as we use it here...

Re: Inter VR Routing

Chopper — Thu, 17 Dec 2020 22:08:53 GMT

@SutareMayur

This is the error I am getting. The RL Server Network refers to a 10.15.6.0/29 subnet

Re: Inter VR Routing

Chopper — Thu, 17 Dec 2020 22:15:53 GMT

...I figured it out, It appears that the inter-VR routing statement does not support network objects. It only supports proper network addressing,