Given Tunnel Interface IP is wrong but still tunnel is up

Sujanya — Fri, 03 Mar 2023 11:34:55 GMT

I am seeing the Ip address give to the tunnel interface is wrong ( for the tunnel with AWS) , but tunnel came up and working without any issue.

Can anybody suggest on this. Would the IP address which we will give to the tunnel interface would not matters.

Re: Given Tunnel Interface IP is wrong but still tunnel is up

TomYoung — Fri, 03 Mar 2023 11:47:22 GMT

Hi @Sujanya ,

The IP address on an IPsec tunnel is optional. A standard site-to-site VPN does not require a tunnel IP address. https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/vpns/set-up-site-to-site-vpn/set-up-an-ipsec-tunnel (Step 3)

Since the tunnel is point-to-point, all the NGFW has to do is route traffic down the tunnel and it will be received on the other side. No routing to IP addresses is needed.

Thanks,

Tom

topic Re: Given Tunnel Interface IP is wrong but still tunnel is up in General Topics

Given Tunnel Interface IP is wrong but still tunnel is up

Re: Given Tunnel Interface IP is wrong but still tunnel is up