topic Re: L2 Extensions in General Topics

L2 Extensions

palofw_learner — Sun, 05 Jun 2022 11:12:46 GMT

Hello People ,

We have a situation where in a Site to Site IPSEC exists between Cisco ASA and PALO ALTO FW

The LAN segment of the Network is behind Cisco ASA . Infact all of the VLANS are in this LAN Segment which is Behind Cisco ASA .

The requirement is that Gateway for these VLANS will be the PALO ALTO FW

So i need to know if it is possible to have VPLS over GRE on Palo ALTO

LAN( VLAN )>>>> Cisco ASA 5500Series>>>>>S2S IPSEC >>>>PANFW (Gateway for VLANS).

Can anyone help here ?

Re: L2 Extensions

rmfalconer — Mon, 06 Jun 2022 17:10:58 GMT

How do the broadcasts from the clients traverse the IPSEC tunnel? The ASA can use policy or route-based VPN but I don't think either will have a mechanism to allow broadcasts. Without that, the clients won't be able to find their gateways.

Why do the gateways need to be on the PAN?

Re: L2 Extensions

palofw_learner — Tue, 07 Jun 2022 15:53:28 GMT

Through GRE Tunnel . This is a requirement from client

Re: L2 Extensions

rmfalconer — Wed, 08 Jun 2022 21:07:16 GMT

Where are the gateways now?

What's going to terminate the GRE tunnel on the client side? ASA doesn't support GRE.

Re: L2 Extensions

palofw_learner — Mon, 13 Jun 2022 12:07:03 GMT

Sorry the other side is SRX and not ASA ,