routed interfaces in vsys1 and virtual wire config in vsys2 possible ?

[DatacenterNX]

Hi all,

I've not found a conclusive answer in the config guide - although it stands to reason to assume the answer is "yes".

In a multi vsys environment can I have a regular deployment in vsys1 (i.e. routed interfaces acting as DGW for my secured vlans) and a bump_in_the wire (vwire) deployment in vsys2 on two dedicated interfaces?

Thanks in advance.

Rik

[SCantwell_IM]

@DatacenterNX  yes, it goes to reason that you could use 2 vsys for that.

My question is why?  There is more CPU load on the FW with processing the traffic with the 2 vsys.

I guess if you have a fast firewall, you may not notice this.

So my question is.. why cannot you have the 2 vsys interfaces in vsys1?  I have many customers that mix/match L3 and Vwire in the same vsys.  I am sure there is a logical reason, and inquiring minds want to know.  😛