Configure a Logical Router

Configure a logical router to enable routing for an Advanced Routing Engine.
In order to perform network routing, the Advanced Routing Engine requires you to configure at least one logical router; there is no default logical router. A logical router maintains a separate routing information base and keeps routes from exposure to other logical routers. The number of logical routers supported for an Advanced Routing Engine varies based on firewall model.
Before you can configure a logical router, you must Enable Advanced Routing.
  1. Select
    Network
    Routing
    Logical Routers
    and
    Add
    a logical router by
    Name
    using a maximum of 31 characters. The name must start with an alphanumeric character, underscore (_), or hyphen (-), and can contain a combination of alphanumeric characters, underscore (_) or hyphen(-). No dot (.) or space is allowed.
  2. Add interfaces to the logical router.
    1. While still on the Logical Router
      General
      tab, select the
      Interface
      tab.
    2. Add
      an interface to the logical router by selecting from the list of interfaces. An interface can belong to only one logical router. Repeat to add more interfaces, as in the following example for the logical router named LR-1:
  3. (
    Optional
    ) Select
    Administrative Distances
    to change the global administrative distance (from the default setting) for various types of routes.
    • Static
      —Range is 1 to 255; default is 10.
    • Static IPv6
      —Range is 1 to 255; default is 10.
    • OSPF Intra Area
      —Range is 1 to 255; default is 110.
    • OSPF Inter Area
      —Range is 1 to 255; default is 110.
    • OSPF External
      —Range is 1 to 255; default is 110.
    • OSPFv3 Intra Area
      —Range is 1 to 255; default is 110.
    • OSPFv3 Inter Area
      —Range is 1 to 255; default is 110.
    • OSPFv3 External
      —Range is 1 to 255; default is 110.
    • BGP AS Internal
      —Range is 1 to 255; default is 200.
    • BGP AS External
      —Range is 1 to 255; default is 20.
    • BGP Local Route
      —Range is 1 to 255; default is 120.
    • RIP
      —Range is 1 to 255; default is 120.
  4. Click
    OK
    .
  5. (
    On a firewall supporting multiple virtual systems
    ) Assign the logical routers to a virtual system.
    1. Select
      Device
      Virtual Systems
      and select a virtual system and
      General
      .
    2. Add
      one or more
      Logical Routers
      .
    3. Click
      OK
      .
  6. Click
    OK
    .
  7. (
    Optional
    ) Configure ECMP for a logical router by navigating to
    Network
    Routing
    Logical Routers
    , selecting a logical router, and then
    General
    ECMP
    . Configure ECMP for a logical router much as you would for a virtual router on a legacy routing engine.
  8. Commit
    the changes.
  9. (
    Optional
    ) View Runtime Stats for a logical router.
    1. For a specific logical router, select
      More Runtime Stats
      on the far right.
    2. To see the route tables for all protocols, on the
      Routing
      tab, select
      Route Table
      and
      Display Address Family
      :
      IPv4 and IPv6
      ,
      IPv4 Only
      , or
      IPv6 Only
      .
    3. To see entries in the Forwarding Information Base (FIB), select
      Forwarding Table
      .
    4. Select
      Static Route Monitoring
      to see the static routes you are monitoring.
    5. Select the
      BGP
      tab and then
      Summary
      to see BGP settings.
    6. Select
      Peer
      to see BGP peer settings.
    7. Select
      Peer Group
      to see BGP peer group settings.
    8. Select
      Route
      and
      Display Address Family
      :
      IPv4 and IPv6
      ,
      IPv4 Only
      , or
      IPv6 Only
      to see the attributes of BGP routes.
  10. Access the CLI to view advanced routing information. The PAN-OS CLI Quick Start lists the commands in the CLI Cheat Sheet: Networking.

Recommended For You