ROUTING INTER VSYS

Reply
Highlighted
L3 Networker

ROUTING INTER VSYS

Hello ,

I need to route users between more than 2 VSYS. do you know if it's possible to route packet between more than 2 VSYS. PACKET IN-> VSYS1 -> VSYS2->VSYS3-> out. What is the limitation for the routing inter VSYS

thks for your help!

ALex

Tags (2)
Highlighted
L7 Applicator

Re: ROUTING INTER VSYS

See the section on defining inter-vsys policies for the steps involved in the Virtual Systems documentation link below.

Virtual Systems (VSYS)

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center
Highlighted
L3 Networker

Re: ROUTING INTER VSYS

hello,

so I can read "

Inter-vsys traffic, also known as ‘shared-vsys’, allows the administrator to define systems where

flows can traverse two vsys’s without the need to leave the firewall when being routed between

the vsys’." I don't know if sgnificate that the flow can't traverse more than 2 VSYS?

Highlighted
L4 Transporter

Re: ROUTING INTER VSYS

did you implement shared gateway

A shared gateway allows you to create a common virtual interface for the virtual systems that correspond to a single physical interface.  This is helpful in environments where the ISP provides only a single IP address.  All of the virtual systems communicate with the outside world through the physical interface using a single IP address. For one or more shared VSYS to forward traffic to/from a shared gateway they have to be configured with the same virtual router (VR).  The interface must be a Layer3 interface and can include VLANs, aggregate ethernet, loopback and tunnel interfaces.

ou are limited to created shared gateway depend of the appliance

VSYS Shared Gateway Capacity Matrix

ref

How to Set Up Shared Gateway and Inter VSYS

regard's

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!