topic Multiple tunnel migration from ASA to PAN (zone per tunnel not desired) in Expedition Discussions

Multiple tunnel migration from ASA to PAN (zone per tunnel not desired)

jakegibb2077 — Fri, 10 Nov 2023 15:21:38 GMT

Hello,

I am working on a migration where the source ASA has 74 VPN L2L tunnels (to remote stores using same config) and the migration tool has created individual ACLs and Zones for each. This makes managing them tedious and would prefer to have a single zone named VPN STORES and all tunnel interfaces within that zone and one ACL. Is there a method to do this in Expedition? Any help would be appreciated!

Re: Multiple tunnel migration from ASA to PAN (zone per tunnel not desired)

sanandh — Mon, 13 Nov 2023 06:12:45 GMT

For the benefit of others, posting an update on solution discussed with @jakegibb2077
This can be achieved with the following steps:
- Use a filter and detach the tunnel interfaces from the zones.
- Create a new zone or pick an existing zone to use for all tunnels
- Attach all the tunnel interfaces to the selected zone.
Keep in mind the security policies also need to be updated to reference this selected zone.