Virtual Routers

[Angel]

Hi,

I have the WAN it's vlan 9 with the IP x.x.9.1 and I have to give access to vlan 6 which is the part of users, the Palo Alto must make the routing, vlan 6 has the IP's: x.x.6.0/24, x.x.109.0/24, which should go out x.x.6.254.

How can I do routing with the virtual routers?

Thanks.

Regards.

[darren_g]

Assuming you want a static route.

From your management console.

Select "Network", then "Virtual Routers".

Select your active virtual router (generally, the one which has the interface in it).

Select the "Static Routes" tab from the table at the left, and click "add".

Give the route a name (something which identifies it - say, "Virtual Servers" or "Inside Network").

Type in the destination - so in your case, you would type

x.x.6.0/24

Pick your outbound interface - VLAN.6 in your case

Select the next hop type of "IP Address", and type in the destination for your next hop - x.x.6.254

Save and repeat for the second segment.

You should get something which looks like this

However, if your vlan.6 interface has an address in x.x.6.0/24, then probably won't have to add a route for this network - it will count as a "connected" route, and the PAN will automatically route anything destined for the x.x.6.0/24 network out this interface.