How to solve overlaping IP addresses for configuration with Shared Gateway and multiple Virtual Systems

Announcements

ATTENTION Customers, All Partners and Employees: The Customer Support Portal (CSP) will be undergoing maintenance and unavailable on Saturday, November 7, 2020, from 11 am to 11 pm PST. Please read our blog for more information.

Reply
Highlighted
Not applicable

How to solve overlaping IP addresses for configuration with Shared Gateway and multiple Virtual Systems

Hi,

Do you know, how this problem can be solved?

Can we use separate Virtual Routers per each Virtual System?

Best Regards

Pawel

Highlighted
L5 Sessionator

Hello Pawel,

Yes. Multiple VR with multiple VSYS is the way to go.

I was able successfully commit the following configuration:

Diff_VR.PNG.png

And was NOT able to commit this configuration:

Same_VR.PNG.png

So, if you configure different VSYS with different VR, you should be able to configure different interfaces with overlapping subnets.

Hope that helps!

Regards,

Kunal Adak

Highlighted
Not applicable

Thanks for your reply! Your answer is helpful but I meant other thing. Let say I have a few Virtual Systems that represent separate clients and each of the users has a common interface for external communications. This is solved by Shared Gateway and single Virtual Router is used to route the traffic for all of the Virtual Systems through the Shared Gateway. What if the users use overlapping addresses. Can we also use separate VR for each VSYS in this case?

Best Regards

Pawel

Highlighted
L5 Sessionator

Here is a doc that explains that it is not allowed.

https://live.paloaltonetworks.com/docs/DOC-2161

Hope this helps.

Thanks

Numan

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!