Searching a Howto for two ISP Connection and two Lan

[clonesheep]

Hello,

i seach a HowTo for configuration two different ISP connections and two different LANs. Both should nothing to do with eatch other. They should be seperate. Is there any where a HowTo for this configuration? I only found twi isp connection for use with Backup connection but nothing for user bothe with different networks.

I use a PA200 for this and port 1/4 and 4/4 are my isp. help me to find a good and easy work manual or howto.

[kiwi]

Hi,

I think this can help you :

https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-ISP-Redundancy-and-Load...

I believe you want 'Example 1: Load balancing with no backup' from the above link.

Hope it helps.

-KiWi.

[clonesheep]

No,

I want two separate isp and to each his own lan. no load balancing and so one. only two separate ways outgoing and two input.

[kiwi]

I believe Example 1 describes this.  (using Load Sharing ...no balancing).

If this is not what you need then you might want 2 different VRs or multi-vsys (one for each ISP) ... this will completely seperate your LANs.

Multi VSYS is not supported on PA-200... but mutiple VR is supported (upto 3 on a PA-200).

VR1 for ISP1 and LAN1

VR2 for ISP2 and LAN2

Cheers !

-KiWi.

[clonesheep]

Ah yes.

I think this will it be with

VR1 for ISP1 and LAN1

VR2 for ISP2 and LAN2

so now i need a very easy guid to configure it. I am a nooby litte starter with PA and PAN OS...

[reaper]

please take a look at the 'getting started' series of articles, they'll help you through the stages of setting up your firewall

the layer3 one will hekp you set up routing between 2 interfaces, if you repeat that step for the second VR, you should be good to go

[clonesheep]

Hi,

reaper that are nice how tos.

my question now. i have now VR1 and VR2 . can i take both via one untrust and one trust nework zone or must i build for every one a sperate network zone?

And policies then for every virtual router a policie?

[reaper]

I would recommend using a unique zone-name for each as that will allow you to retain more control and not accidentally open access. this will also allow you to view more easily which traffic is being generated by each set of zones and build reports for both separately