Inter-routing between diffrent Virtuel Router

[hamza-zidane]

Hi Brothers,

Plz help me, i have a scénario wich i must configure every interface with its own Virtuel router, and i need to make routing between  this virtuel router.

Ex:

Ethernet1/1 has VR1

Ethernet1/2 has VR2

How i can make routing between VR1 & VR2 ??

plz your help

[Remo]

Hi @hamza-zidane

Simply add routes where you choose "Next VR" as next hop and then ypu choose the coresponding VR.

Regards,

Remo

PS: the big question is: why do you need to do that? If you need routing between these interfaces this separation will only add operational burdens but no additional security.

[TerjeLundbo]

I have been told that inter-VR traffic is slow, and that if you need good performance it is best to run such traffic via an external switch. I don't know if this is still the case in PAN-OS 8.

[hamza-zidane]

hi @Remo

Thank you very much brother for ur reply, i need this design because i have 2 ISP Provider, and i must use it redondancy, and i have to configure the globalprotect in this dsign.

for more information you can see this video : https://www.youtube.com/watch?v=0jUcZ9ISVwk

[Remo]

Are both ISPs equal (bandwidth, service level, ...)?

[BPry]

@hamza-zidane,

I don't think that's going to be the easiest way to configure what you are looking for, which is what @Remo is fishing for I think. What you're currently doing is going to work obviously, but it gets really messy and becomes a nightmare to document properly.