Virtual router and its default one

[kevinospf]

Hi, In each palo alto, there is default virtual router. We can create ourself virtual router. When we created a new virtual router in this PA, what is relation and difference between the defaul virtual router and the created virtual r? Can we say if routes cannot find destination in the created virtual router, then the routes will go to the default virtual router? Thanks

[seb_rupik]

Hi there,

It is only 'default' in respect to it being present in the factory shipped config. Don't think of it as a default route which can be used when all other routing options are exhausted.

Virtual Routers are logically separate, if you want the traffic to flow between them then you must explicitly configure it.

Incidentally, you can delete it or call it something totally different, the name 'default' is arbitrary.

cheers,

Seb.

[kevinospf]

@seb_rupik Thanks for your reply! so can we say there is no difference between the original "default" (virtual router) and virtual router that we created functionally? 

[seb_rupik · Accepted solution]

Hi there,

Correct. The 'default' VR is safe to delete (once you have removed all the associated configuration such as attached L3 interfaces) and replace with something else. It being called 'default' does not give it any special properties.

cheers,

Seb.

[kevinospf]

Thanks! One more question, what is relation between several virtual routers in one PA? can we say they are working like each vrf in cisco router?

[seb_rupik · Accepted solution]

Yes the concept of a VR is the same as a Cisco VRF. On the subject of platform virtualisation there is also the vsys, which is similar to a VDC/ security context.

[kevinospf]

Thank you!