topic Re: L2 Over L3 with VXLAN protocol in General Topics

L2 Over L3 with VXLAN protocol

brenna — Wed, 12 Apr 2023 21:02:35 GMT

Hello,

Is it possible to configure a VXLAN tunnel on a Palo Alto 3220 (running PANOS 10.2.3)? I.e. is L2 over L3 tunneling using VXLAN protocol possible? If so, is there an example configuration you can point me to?

Thanks!

Re: L2 Over L3 with VXLAN protocol

BPry — Thu, 13 Apr 2023 21:13:26 GMT

@brenna,

You can do tunnel content inspection to inspec the VXLAN tunnel and manage the security policy aspect of things. The firewall won't act as a VTEP or participate in the fabric.

Re: L2 Over L3 with VXLAN protocol

brenna — Thu, 13 Apr 2023 21:51:43 GMT

Thank you for the help!