Default router in interface config

[kevinospf]

When an interface of PA is assigned an virtual router, even if the virtual router is just created without any other route configuration such as static route, ospf etc, the interface still can start to work(be able to ping its connected neighter device), right? so what is virtual router for in this situation? 

[Mick_Ball]

In that situation... you do not need a VR, your firewall will know how to get to the neighbor as it is locally attached.   if the network you are trying to connect to is not locally attached to the firewall then the VRouter/OSPF/Static routes etc will tell you how to get there...

[kevinospf]

@Mick_Ball wrote:

In that situation... you do not need a VR, your firewall will know how to get to the neighbor as it is locally attached.  

No, the device connected to PA physically cannot ping the PA if no virtual router is created and associated with the interface connected to the device

[seb_rupik]

Hi there,

The Virtual Router provides two important system objects, the RIB and FIB. Even with a single interface both of these tables would be populated with information which would instruct the system kernel how to forward packets. I'm no linux kernel expert but without these two tables I'd wager that any Layer 3 function would cease to operate.

cheers,

Seb.

[Mick_Ball]

yes of course... aplogees for misleading info...  it was more of a L3 connection in general and assumed by the original post that it was possible...