How to solve overlaping IP addresses for configuration with Shared Gateway and multiple Virtual Systems

[Pawel]

Hi,

Do you know, how this problem can be solved?

Can we use separate Virtual Routers per each Virtual System?

Best Regards

Pawel

[kadak]

Hello Pawel,

Yes. Multiple VR with multiple VSYS is the way to go.

I was able successfully commit the following configuration:

And was NOT able to commit this configuration:

So, if you configure different VSYS with different VR, you should be able to configure different interfaces with overlapping subnets.

Hope that helps!

Regards,

Kunal Adak

[Pawel]

Thanks for your reply! Your answer is helpful but I meant other thing. Let say I have a few Virtual Systems that represent separate clients and each of the users has a common interface for external communications. This is solved by Shared Gateway and single Virtual Router is used to route the traffic for all of the Virtual Systems through the Shared Gateway. What if the users use overlapping addresses. Can we also use separate VR for each VSYS in this case?

Best Regards

Pawel

[mbutt]

Here is a doc that explains that it is not allowed.

https://live.paloaltonetworks.com/docs/DOC-2161

Hope this helps.

Thanks

Numan