Create a Post
Showing results for 
Search instead for 
Did you mean: 

VSX Shared Vlan Interfaces and ARP Issue

We are deploying VSX and getting some difficulties implementing it to customer's environment whether we use vSwitch or vRouter.

Both VSes need to have an access to shared vlan interfaces (internal & DMZ). eth5 (internal) has 4 vlans and eth6 (DMZ) has 1 vlan only. I believe vSwitch can have only 1 vlan tag, it seems we don't have other options but to use vRouter or create multiple vSwitch for each vlan.

The second problem is after creating vSwitch and connecting to VS0  (warp link) with the ip address of, the gateway or VS0 is not responding to arp request.
"arp who-has tell" Clearly, that IP belongs to virtual device.

Did I miss anything? Any suggestion are welcome and appreciated. 

I have attached the topology for reference. Thank you.


VSX Diagram.png

0 Kudos
2 Replies

For each VLAN you need to connect to more than 1 VS you create a virtual switch, this Virtual switch can also be connected to a VLAN in a trunk port. This is not limited to a physical interface.
Regards, Maarten
Employee Employee

As said earlier vSwitch can only handle one VLAN. So technically you could spin up 5 vSwitches one for each VLAN. But I struggle to understand the purpose of two firewalls connecting to the same interfaces (all) I understand if they shared one or two, but not all. Seems a bit strange.

ARP issue is probably related to VLAN tagging not set correctly or check your trunk between VSX and next hop

0 Kudos


Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events