topic Re: site to site VPN on TP-link --- PALO ALTO ---- AWS in General Topics

site to site VPN on TP-link --- PALO ALTO ---- AWS

SamuelCardoz — Mon, 21 Feb 2022 08:44:57 GMT

As of now STORE router/POS1 able to reach the head office(PALO ALTO) via site to site VPN and HeadOffice(PAN) to AWS also working via site to site VPN. But our main goal is that POS1/Store able to reach the AWS network. As of the momment POS1 not able to reach the AWS networks. I already tried to add a route on the PAN from Store network going to AWS tunnel but still not working.
Any idea on how i can make it working. Is there any one from the community have this kind of setup.

Thanks

Re: site to site VPN on TP-link --- PALO ALTO ---- AWS

SutareMayur — Mon, 21 Feb 2022 09:17:54 GMT

Hi @SamuelCardoz ,

In order to achieve your goal, you need to do all the required configuration at both Palo Alto as well as AWS end to allow communication between

STORE router/POS1 and AWS. Only adding route at Palo Alto end won't help. You can verify traffic logs on palo alto side to see what's going on and decide further actions.

I will recommend you to verify below configurations-

Security Policy

NAT if any

Encryption domains at both sides

Routes at both sides.