May I set the same ip in different interface between two virtual system?

Reply
Highlighted
L1 Bithead

May I set the same ip in different interface between two virtual system?

I  set ip address 192.168.1.254/24 in the ethernet1 which belong default router in the vsvy1.

I try to set the same ip address in the ethernet2 which belong another VR in the vsvy2.

When I commit, it will display duplicate address.


I just do some lab about vistual system for my client.

But I want to sure may I set the same ip in different interface between two virtual system?


Accepted Solutions
L7 Applicator

Hello Kylelee,

I don't think we can configure the exact same IP address on 2 different interfaces, even though they are part of 2 different VSYS. It will throw you below mentioned error:

Error: duplicate address for interface ethernet1/xx and ethernet1/yy

Error: interface configuration error

(Module: device)

Commit failed

View solution in original post


All Replies
L7 Applicator

Hello Kylelee,

I don't think we can configure the exact same IP address on 2 different interfaces, even though they are part of 2 different VSYS. It will throw you below mentioned error:

Error: duplicate address for interface ethernet1/xx and ethernet1/yy

Error: interface configuration error

(Module: device)

Commit failed

View solution in original post

Highlighted
L1 Bithead

Thanks for your support.

But it's strange, I originally thought that different virtual system shouble be independent system.

Highlighted
L7 Applicator

Hello Kylelee,

Could you please give me some time, i will try to get in touch with product-management team and provide you a valid explanation.

Thanks

Highlighted
L5 Sessionator

Hi all,

It's a known limitation for Vsys. You can't have same IP on different interface (member of diff Vsys).

V.

Highlighted
L5 Sessionator

As per my understanding you can not have the same ip address on two different interfaces. That is the limitation of the system.

However,

Overlapping IP address space requires separate VR/vsys

Ethernet interface can not have same ip interface even in different vsys.


Hope this help.

Numan

Highlighted
L7 Applicator

This answer is crazy.

Virtual routers exist because we want separation in routing between the devices.  Why cripple this ability by preventing a basic function like ip address assignment in different virtual routers.

I hope this is on the near term roadmap to fix.  I would classify is buggy behavior.

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center
Highlighted
L1 Bithead

HI, does anyone know if there is a change regarding this?

Highlighted
L1 Bithead

Just confirmed today. This behavior still exists.  IP@ space can overlap between multiple VR's but no two interfaces can have the same IP@...  Does not require multiple VSYS, though.

Highlighted
Cyber Elite

In addition: the behaviour still exists in 8.0.2

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!