topic double nat in General Topics

double nat

Gruppoes — Thu, 06 Feb 2025 12:22:21 GMT

hello, my palo alto pa440 wan is connected to another firewall who is connected to the isp with a public ip natted to my firewall.i have to setup an ipsec tunnel i don't understand if i have to use the public ip or the vlan ip as local peer ip address

thanks

Re: double nat

PatWruk — Thu, 06 Feb 2025 14:03:51 GMT

I believe with this on your end you would put your outside IP of the firewall. So that would be the vlan IP that your firewall sends traffic out as.

With this configuration, the other end would have to be on a public IP and your device would have to be the initiator, or have port forwarding setup on the firewall your PA440 is connected to.

Re: double nat

Gruppoes — Thu, 06 Feb 2025 14:31:35 GMT

this is my situation, i need to set up the tunnel using the 77.72.198.204 public ip that i reach usign vlan 2034