Multiple IPSec tunnels, single external IP

digdoug — Wed, 23 Mar 2022 13:09:53 GMT

Looking to set up a POC with a PA-820 that has the following

IPSec VPN site-to-site between our local facility and 3 partner networks
Single external IP, 3 tunnels (IKE P2)
NAT to a single host on our local private network

Is this reasonable/possible?

Re: Multiple IPSec tunnels, single external IP

SutareMayur — Wed, 23 Mar 2022 17:42:02 GMT

You can create multiple IPSEC tunnels from your Palo Alto’s single external IP and different partner external IPs.

Only thing you need to make sure of properly defining the VPN encryption domain, security and/or NAT policies and routing to differentiate traffic and forward it to right tunnel interface.

Hope it helps!

topic Re: Multiple IPSec tunnels, single external IP in General Topics

Multiple IPSec tunnels, single external IP

Re: Multiple IPSec tunnels, single external IP