Configure a Logical Router (PAN-OS)

1. Select NetworkRoutingLogical Routers and Add a logical router by Name using a maximum of 31 characters. The name must start with an alphanumeric character, underscore (_), or hyphen (-), and can contain a combination of alphanumeric characters, underscore (_) or hyphen(-). No dot (.) or space is allowed.
2. Add interfaces to the logical router.

   1. While still on the Logical Router General tab, select the Interface tab.
   2. Add an interface to the logical router by selecting from the list of interfaces. An interface can belong to only one logical router. Repeat to add more interfaces, as in the following example for the logical router named LR-1:

3. (Optional) Select Administrative Distances to change the global administrative distance (from the default setting) for various types of routes.

   • Static—Range is 1 to 255; default is 10.
   • Static IPv6—Range is 1 to 255; default is 10.
   • OSPF Intra Area—Range is 1 to 255; default is 110.
   • OSPF Inter Area—Range is 1 to 255; default is 110.
   • OSPF External—Range is 1 to 255; default is 110.
   • OSPFv3 Intra Area—Range is 1 to 255; default is 110.
   • OSPFv3 Inter Area—Range is 1 to 255; default is 110.
   • OSPFv3 External—Range is 1 to 255; default is 110.
   • BGP AS Internal—Range is 1 to 255; default is 200.
   • BGP AS External—Range is 1 to 255; default is 20.
   • BGP Local Route—Range is 1 to 255; default is 20.
   • RIP—Range is 1 to 255; default is 120.

   To change the default administrative distances for Strata Cloud Manager, select DeviceRouting and select a logical router. Then select Advanced SettingsAdministrative Distances.
4. Click OK.
5. (On a firewall supporting multiple virtual systems) Assign the logical routers to a virtual system.

   1. Select DeviceVirtual Systems and select a virtual system and General.
   2. Add one or more Logical Routers.
   3. Click OK.

6. Click OK.
7. (Optional) Configure ECMP for a logical router by navigating to NetworkRoutingLogical Routers, selecting a logical router, and then GeneralECMP. Configure ECMP for a logical router much as you would for a virtual router on a legacy routing engine.

   ECMP is not supported for equal-cost routes where one or more of those routes has a virtual router or logical router as the next hop. None of the equal-cost routes will be installed in the Forwarding Information Base (FIB).
8. Commit the changes.
9. For a firewall with a pre-existing configuration, select DeviceSetupOperations and Reboot Device. Then log back into the firewall.
10. (Optional) View Runtime Stats for a logical router.

    1. Select NetworkRoutingLogical Routers and for a specific logical router, select More Runtime Stats on the far right.
    2. To see the route tables for all protocols, on the Routing tab, select Route Table and Display Address Family: IPv4 and IPv6, IPv4 Only, or IPv6 Only.

    3. To see entries in the Forwarding Information Base (FIB), select Forwarding Table.
    4. Select Static Route Monitoring to see the static routes you are monitoring.
    5. Select the BGP tab and then Summary to see BGP settings.
    6. Select Peer to see BGP peer settings.
    7. Select Peer Group to see BGP peer group settings.
    8. Select Route and Display Address Family: IPv4 and IPv6, IPv4 Only, or IPv6 Only to see the attributes of BGP routes.
11. Access the CLI to view advanced routing information. The PAN-OS CLI Quick Start lists the commands in the CLI Cheat Sheet: Networking.