"Also yes the PAN needs to have routing configured in its 'virtual router'. Has this been accomplioshed?. . . . " In routing field, for example, R1( orPC1) --------- Router2-------R3(PC2), when we need PC1 ping PC2, what we need to do is to configure local ip address and default-gateway or default ip route at PC1/PC2. and we do NOT need to configure additional routing at Router2. Only thing we need to do at Router2 is to setup two interfaces toward PC1 and PC2 respectively. I am not familiar with the firewall, but at this point, it should be similar with Router. PA should just setup virtual router in this case
... View more