Virtual Router Configurations for Root and Vsys Overview
At the root level, you can configure a virtual router as shareable, enabling that VR to be used by all vsys. By default, the untrust-vr is shared. To unshare a VR, you must remove all assigned vsys from a shared VR.
At the vsys level, you can configure the virtual routers as described in Table 1.
Table 1: Virtual Router Configuration for Root and Vsys
Shared root-level virtual routers
By default, the root and vsys share the untrust-vr. However, you can configure a vsys to use any VR that is shared at the root-level.
Non-sharable vsys-level virtual router
This is a vsys-specific virtual router that, by default, maintains the routing table for the Trust-vsysname zone. By default, a vsys-level virtual router is named vsysname-vr (you can also customize the name to make it more meaningful). All vsys-level virtual routers are nonsharable.