08-04-2023 07:02 PM
When an interface of PA is assigned an virtual router, even if the virtual router is just created without any other route configuration such as static route, ospf etc, the interface still can start to work(be able to ping its connected neighter device), right? so what is virtual router for in this situation?
08-05-2023 02:03 AM
In that situation... you do not need a VR, your firewall will know how to get to the neighbor as it is locally attached. if the network you are trying to connect to is not locally attached to the firewall then the VRouter/OSPF/Static routes etc will tell you how to get there...
08-05-2023 05:45 AM
@Mick_Ball wrote:
In that situation... you do not need a VR, your firewall will know how to get to the neighbor as it is locally attached.
No, the device connected to PA physically cannot ping the PA if no virtual router is created and associated with the interface connected to the device
08-06-2023 02:23 PM
Hi there,
The Virtual Router provides two important system objects, the RIB and FIB. Even with a single interface both of these tables would be populated with information which would instruct the system kernel how to forward packets. I'm no linux kernel expert but without these two tables I'd wager that any Layer 3 function would cease to operate.
cheers,
Seb.
08-07-2023 03:28 AM
yes of course... aplogees for misleading info... it was more of a L3 connection in general and assumed by the original post that it was possible...
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
