virtual router to virtual router communication

[paloaltouser2020]

hi

i'm using vm series, and i have 2 virtual routers, each of them has it's own lan and wan

how can i make the lans connect to each other? 

i've tried to do static routing but the traffic doesn't go through. what's the correct way to do that?

thank you

[Remo]

Hi @paloaltouser2020 

You already used the correct way. Did you configure the static routes for each LAN on bothe virtual routers and did you also configure a security policy that allows the connection between the LANs?

[MP18]

@paloaltouser2020 

As Remo mentioned each LAN need static route to each other and next hop will be the VR.

For example if LAN 1 has VR 1 and it need to communicate to LAN 2 which is on VR2 then on VR1 you need this static route

VR1 config 

Destination LAN2

Next Hop   Next VR

Select  VR2

Same thing  you need to do on VR2.

Also as mentioned by Remo you need security rules is both directions.

Please check Traffic logs for more info

Regards

[paloaltouser2020]

so just to check myself

vr1 lan 192.168.50.1/24

vr2 lan 192.168.60.1/24

vr1 static route 

destination 192.168.60.0/24 next hop 192.168.60.1?

and vr2 the same but for 50?

[MP18 · Accepted solution]

@paloaltouser2020 

vr1 static route 

destination 192.168.60.0/24 next hop  choose Next VR name  and below that tab 

choose Vr2

And do same for Routing from VR2 to VR1

Regards

[paloaltouser2020]

yeah you right. i've noticed it later after i wrote to you. thank you 🙂

[johnlinkowsky]

How does this work when each VR is OSPF?  Is there any docs showing how to configure VR to VR communication on a SINGLE vsys.  Each VR is using OSFP to route "outside" to respective networks, but need to talk to EACH OTHER via the FW.  How do we do this?