Configure Virtual Routers

1. Gather the required information from your network administrator.

   • Interfaces on the firewall that you want to perform routing.
   • Administrative distances for static, OSPF internal, OSPF external, IBGP, EBGP and RIP.
2. Create a virtual router and apply interfaces to it.

   The firewall comes with a virtual router named default. You can edit the default virtual router or add a new virtual router.

   1. Select NetworkVirtual Routers.
   2. Select a virtual router (the one named default or a different virtual router) or Add the Name of a new virtual router.
   3. Select Router SettingsGeneral.
   4. Click Add in the Interfaces box and select an already defined interface.

      Repeat this step for all interfaces you want to add to the virtual router.
   5. Click OK.
3. Set Administrative Distances for static and dynamic routing.

   Set Administrative Distances for types of routes as required for your network. When the virtual router has two or more different routes to the same destination, it uses administrative distance to choose the best path from different routing protocols and static routes, by preferring a lower distance.

   • Static—Range is 10 to 240; default is 10.
   • OSPF Internal—Range is 10 to 240; default is 30.
   • OSPF External—Range is 10 to 240; default is 110.
   • IBGP—Range is 10 to 240; default is 200.
   • EBGP—Range is 10 to 240; default is 20.
   • RIP—Range is 10 to 240; default is 120.

   See ECMP if you want to leverage having multiple equal-cost paths for forwarding.
4. Commit virtual router general settings.

   Click OK and Commit.
5. Configure Ethernet, VLAN, loopback, and tunnel interfaces as needed.

   Configure Layer 3 Interfaces.

   In PAN-OS 11.0.1 and later 11.1 releases, for an Ethernet interface, you can Configure a PPPoE Client on a Subinterface.