topic GP portal/gateway config in GlobalProtect Discussions

GP portal/gateway config

S.Byrne — Wed, 01 May 2024 18:07:45 GMT

hello

I am trying to add a GP portal/gateway to support Radius authentication

the customer has provided a public IP that I am trying to use

the IP will not add --there are a list of IP in drop down that I could select

what needs to happen for this new public IP x.x.x.199 to be available to select ?

I created a tunnel.199 and configured the IP but this did not solve the issue

thank you

Re: GP portal/gateway config

reaper — Thu, 02 May 2024 08:48:41 GMT

the public IP can be added to the external interface as an additional /32 IP, or you can create a loopback interface to use in your new portal/gw

a tunnel interface is used after the tunnel has been negotiated, so this represents the network interface inside the ipsec tunnel

Re: GP portal/gateway config

S.Byrne — Thu, 02 May 2024 13:07:01 GMT

thank you for all your help -- on the gateway configuration the tunnel interface has to be defined to allow client IP pools to be created

I have tried a number of tunnel interfaces that match the configuration of existing working GP gateways

I see the error when I try to validate the commit

"> remote-user-tunnel 'tunnel.30' is not a valid reference"

remote-user-tunnel 'tunnel.30' is not a valid reference
remote-user-tunnel is invalid

Re: GP portal/gateway config

S.Byrne — Thu, 02 May 2024 19:41:20 GMT

please see attachment

I have tried different tunnel interfaces but the configuration will not pass validation

Re: GP portal/gateway config

reaper — Mon, 06 May 2024 08:24:13 GMT

you're doing this from panorama: are you configuring the globalprotect gateway in the same template as the tunnel interface is configured in? did you create a fresh tunnel interface or are you trying to use one that is already being used by another gateway?