>
    Configure a Shared Gateway
    Focus
    Download PDF
    Focus
    1. Home
    2. PAN-OS
    3. Virtual Systems
    4. Configure a Shared Gateway
    Download PDF

    Configure a Shared Gateway

    Table of Contents

    Configure a Shared Gateway

    Perform this task if you need multiple virtual systems to share an interface (a Shared Gateway) to the Internet. This task presumes:
    • You configured an interface with a globally-routable IP address, which will be the shared gateway.
    • You completed the prior task, Configure Virtual Systems. For the interface, you chose the external-facing interface with the globally-routable IP address.
    • When configuring the virtual systems, in the Visible Virtual System field, you checked the boxes of all virtual systems that must communicate to be visible to each other.
    1. Configure a Shared Gateway.
      1. Select DeviceShared Gateway, click Add and enter an ID.
      2. Enter a helpful Name, preferably including the ID of the gateway.
      3. In the DNS Proxy field, select a DNS proxy object if you want to apply DNS proxy rules to the interface.
      4. Add an Interface that connects to the outside world.
      5. Click OK.
    2. Configure the zone for the shared gateway.
      When adding objects such as zones or interfaces to a shared gateway, the shared gateway itself will be listed as an available vsys in the VSYS menu.
      1. Select NetworkZones and Add a new zone by Name.
      2. For Location, select the shared gateway for which you are creating a zone.
      3. For Type, select Layer3.
      4. (Optional) Select a Zone Protection Profile (or configure one later) that provides flood, reconnaissance, or packet-based attack protection.
      5. (Optional) In Log Setting, select a log forwarding profile for forwarding zone protection logs to an external system.
      6. (Optional) Select Enable User Identification to enable User-ID for the shared gateway.
      7. Click OK.
    3. Commit your changes.
      Click Commit.

    © 2024 Palo Alto Networks, Inc. All rights reserved.