Virtual Systems Shared Gateways

[alexander_conn]

Is it possible to have multiple shared gateways when running virtual systems.

I'm essentially trying to have 1 physical interface, shared among virtual systems, with an IKE gateway configured on it, so I can have multiple IPSec VPN tunnels established on that interface (the tunnel interfaces will belong to different virtual systems). And another physical interface, shared among virtual systems, for internet connectivity. Is this possible?

[UhMayYeah · Accepted solution]

Yes it is :

Confirmation :Ref : VSYS Shared Gateway Capacity Matrix

For Config Assistance :

Virtual Systems (VSYS)

Configuring Destination NAT with a VSYS with Shared Gateway

How to Set Up Shared Gateway and Inter VSYS

[alexander_conn]

Thank you

[nextgenhappines]

Just words of cautions..

1.  If you are planning to use VSYSs with shared gateway,   The zone protection policy needs to apply on the shared gateway interface,  you cannot apply it on the untrust external zone within the vsys because the untrust zone is a logical zone, it does not have a interface tied with the untrust zone inside the vsys.     The problem is you will lost the ability to define specific zone protection setting per vsys, instead you will need to define a much higher setting on the shared gateway from the untrust to your trusted network, which completely defeat the purpose of vsys, that allow you to create vsys with specific setting without affect other vsys..