07-21-2020 12:18 AM
two PA firewalls and we configured in HA (Active-Passive mode).
We got /28 subnet from ISP for 2 internet lease line links. (Single ISP)
configured links on one firewall with IP 99.100.100.111 on interfacet 4 and 94.100.100.110 on interface 2. With next hope 94.100.100.109
after commit we got interface overlap error.
Is it possible to configure this ?
07-21-2020 07:37 AM - edited 07-21-2020 08:05 AM
Seems you can not configure 2 Interfaces which belong to same network.
/28 gives you host range from 99.100.100.97 - 99.100.100.110.
What are you trying accomplish here?
Do you need two links to same ISP for Redundancy?
Overlapping subnets are supported only when each overlapping interface/sub-interface is in a separate virtual router.
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEoCAK
Regards
07-22-2020 07:22 AM
@bit_byteAs you are taking two separate internet links, why don't you ask ISP to give different subnets for each link so it will have separate gateways? This way you can configure both links as per your requirements. Not sure about your agreements with ISP side but normally we get separate networks for different internet links unless you have your owned public IP addresses and you have asked ISP to route it the way you want.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
