topic Re: PA2020 Dynamic IPsec VPN in General Topics https://live.paloaltonetworks.com/t5/general-topics/pa2020-dynamic-ipsec-vpn/m-p/14103#M10355 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>Since NAT is being performed on the upstream device, you will probably have to enable NAT-T, the option to do so is a checkbox "enable NAT traversal" under IKE gateway advanced options.</P><P></P><P>Also, for dynamic VPNs you have the ability to choose local/peer identification as IP/hostname/email address.</P></BODY></HTML> Tue, 01 May 2012 19:12:28 GMT goku123 2012-05-01T19:12:28Z PA2020 Dynamic IPsec VPN https://live.paloaltonetworks.com/t5/general-topics/pa2020-dynamic-ipsec-vpn/m-p/14102#M10354 <HTML><HEAD></HEAD><BODY><P>Hi </P><P></P><P>I have PA 2020 and I want to configure IPsec VPN but the PA is connected to an ADSL Router and the Ouside IP address if PA firewall is private IP address.&nbsp; I don't have a static Public Ip address on PA side.Could it be possible that I can configure PA as dyamic client IP peer.&nbsp; so that only the PA firewall will initate the VPn connection.Please help.</P><P></P><P>Regards</P></BODY></HTML> Tue, 24 Apr 2012 13:00:55 GMT https://live.paloaltonetworks.com/t5/general-topics/pa2020-dynamic-ipsec-vpn/m-p/14102#M10354 itsecll 2012-04-24T13:00:55Z Re: PA2020 Dynamic IPsec VPN https://live.paloaltonetworks.com/t5/general-topics/pa2020-dynamic-ipsec-vpn/m-p/14103#M10355 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>Since NAT is being performed on the upstream device, you will probably have to enable NAT-T, the option to do so is a checkbox "enable NAT traversal" under IKE gateway advanced options.</P><P></P><P>Also, for dynamic VPNs you have the ability to choose local/peer identification as IP/hostname/email address.</P></BODY></HTML> Tue, 01 May 2012 19:12:28 GMT https://live.paloaltonetworks.com/t5/general-topics/pa2020-dynamic-ipsec-vpn/m-p/14103#M10355 goku123 2012-05-01T19:12:28Z