Can you have 2 Global Protect Portals on the same interface on a VM series

[scoobyboy]

Hello,

Just wondering if it is possible to configure a new GP portal and gateway on the same interface as an existing GP protect and gateway are configured

Thanks in advance !

[saraya]

As far as I know, it cannot be possible. Once you use the same interface information for 2 different Portals and Gateways, you will receive these errors while committing the configuration: 

Error: GlobalProtect portal 'Portal1' has used dynamic interface ethernet1/1 as GlobalProtect portal 'Portal2'

Error: GlobalProtect gateway 'tunnel.10' has used dynamic interface ethernet1/1 as GlobalProtect gateway 'tunnel.20'

If you use non-dynamic interfaces, you will not even see the IP address in the second Portal or Gateway's IP address drow down menu. 

[BPry]

@scoobyboy,

Not on the same logical interface itself no, but you can create a new loopback interface and use the new loopback interface for the portal and gateway. 

[Hamid.Saffarzadeh]

Guys,

What if we have two static IP addresses on the same interface? Is it possible to configure two different portals on the same network interface?

Cheers,

[jasonrakers]

I have 2 different gateways on the same VM interface.  Under the ethernet interface I added a second IP address and used it for the gateway..  So one is x.x.x.x/24 and the other is x.x.x.y 

[Vinod_Pathuri]

You can not have two portals on the same interface you can create a new loopback interface to configure multiple GPs.

Refer to below KB for more info

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClUhCAK