https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-wrong-ip-address-but-tunnel-is-up/ta-p/538443 <P>This Nominated Discussion Article is based on the post "<A href="https://live.paloaltonetworks.com/t5/general-topics/given-tunnel-interface-ip-is-wrong-but-still-tunnel-is-up/m-p/533128" target="_blank" rel="noopener">Given Tunnel Interface IP is wrong but still tunnel is up</A>" by&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/216045">@Sujanya</a>&nbsp; and responded to by <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/77347">@TomYoung</a>&nbsp;. Read on to see the discussion and solution!</P> <P>&nbsp;</P> <DIV class="lia-message-template-content-zone"> <BLOCKQUOTE> <P>I am seeing the IP address given to the tunnel interface is wrong (for the tunnel with AWS), but tunnel still came up and working without any issue.<BR /><BR />Can anybody suggest on this. Would the IP address which we will give to the tunnel interface not matter ?</P> </BLOCKQUOTE> <P>&nbsp;</P> <P>The IP address on an IPsec tunnel is <STRONG>optional</STRONG>.&nbsp; A standard site-to-site VPN does not require a tunnel IP address.&nbsp; <A href="https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/vpns/set-up-site-to-site-vpn/set-up-an-ipsec-tunnel" target="_blank" rel="noopener">https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/vpns/set-up-site-to-site-vpn/set-up-an-ipsec-tunnel</A>&nbsp; (Step 3)</P> <P>&nbsp;</P> <span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="kiwi_0-1681303451745.png" style="width: 999px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/49408iA3D5B834C7E8BD7C/image-size/large?v=v2&amp;px=999" role="button" title="kiwi_0-1681303451745.png" alt="kiwi_0-1681303451745.png" /></span> <P>&nbsp;</P> <P>Since the tunnel is point-to-point, all the NGFW has to do is route traffic down the tunnel and it will be received on the other side.&nbsp; No routing to IP addresses is needed.</P> <P>&nbsp;</P> </DIV> Wed, 12 Apr 2023 22:59:42 GMT kiwi 2023-04-12T22:59:42Z https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-wrong-ip-address-but-tunnel-is-up/ta-p/538443 <P>This Nominated Discussion Article is based on the post "<A href="https://live.paloaltonetworks.com/t5/general-topics/given-tunnel-interface-ip-is-wrong-but-still-tunnel-is-up/m-p/533128" target="_blank" rel="noopener">Given Tunnel Interface IP is wrong but still tunnel is up</A>".</P> Wed, 12 Apr 2023 22:59:42 GMT https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-wrong-ip-address-but-tunnel-is-up/ta-p/538443 kiwi 2023-04-12T22:59:42Z