topic Re: GlobalProtect multiple gateways in General Topics

GlobalProtect multiple gateways

GnContente — Tue, 01 Feb 2022 13:26:15 GMT

Hi All,

Similar to a Cisco ASA tunnel-group configuration where we can have different VPN configurations using the same public IP, I wonder if similar configuration can be achived on Palo Alto. My objective would be to configure different gateways using the same public IP address, however i haven't yet grasp how can i specify which gateway to use when establishing a VPN connection.

Could some one explain if this can be achieved or point me to the proper documentation?

TIA

Re: GlobalProtect multiple gateways

BPry — Wed, 02 Feb 2022 02:06:27 GMT

What exactly are you looking to accomplish? You can certainly have multiple different gateways on the same public IP through utilizing loopback interfaces and configuring your NAT rule base properly. There's a chance though that what you're used to using tunnel group configurations for doesn't require multiple gateways when it comes to PAN.

Re: GlobalProtect multiple gateways

GnContente — Wed, 02 Feb 2022 08:45:21 GMT

Hi @BPry

Thank you for your reply. I do need to configure a full and split tunnel on the same public ip address, in fact i was able to achieve this by specifying which users are full tunnel in the agent > client settings. However for our deployment this is not very flexible, my client wants to be able to chose which type of VPN he/she wants. My objective is then to configure on the same firewall a full and split tunnel VPN using the same gateway of multiple gateways, i am actually intregued on how i could use NAT to achive this.

I was only able so far to find documentation about distributed gateways, it would be kind if you could provide some guidelines on how i could configure a full and split tunnel vpn on the same firewall or to point me out to proper documentation that i can read about.

TIA