topic Re: Accessing multiple network zones over IPSEC VPN in General Topics https://live.paloaltonetworks.com/t5/general-topics/accessing-multiple-network-zones-over-ipsec-vpn/m-p/18628#M13581 <HTML><HEAD></HEAD><BODY><P>Figured out my problem.&nbsp; Firewall policy rule on FW at Site-B needed to allow me to gain access.</P></BODY></HTML> Wed, 15 Aug 2012 20:27:56 GMT cmateam 2012-08-15T20:27:56Z Accessing multiple network zones over IPSEC VPN https://live.paloaltonetworks.com/t5/general-topics/accessing-multiple-network-zones-over-ipsec-vpn/m-p/18625#M13578 <HTML><HEAD></HEAD><BODY><P>I am trying to setup a IPSEC tunnel between two PA-2020's, one on each side.&nbsp; I have the tunnel connecting and can access devices over the tunnel. However I am trying to access multiple network zones over the tunnel, and I am not sure how to configure that.&nbsp; I've typed up my setup below.</P><P></P><P>Site-A (main site) has a 192.x.x.x/16 and a 10.10.x.x/16 network.&nbsp; Site-B (branch side) is a 10.20.x.x/16, 10.30.x.x/16, 10.40.x.x/16, etc networks separated by physical interfaces and zones. We have a tunnel bound to our 192.x.x.x/16 network that allows us access to the 10.20.x.x/16 network, and a route of 10.20.x.x/16 traffic destined to the tunnel. However I am a bit confused on how to get the 192.x.x.x/16 network traffic to route to any of the other networks, 10.30.x.x/16, 10.40.x.x/16 through the same tunnel, or over different tunnels. </P><P></P><P></P><P>Do I need to specify proxy-ID information in the tunnel for the connections to work?</P><P></P><P>This thread is similar in the line of questioning, but not quite what I am needing help with: <A href="https://live.paloaltonetworks.com/thread/2205">Bind multiple VPNs to a single tunnel interface? </A></P><P></P><P>If there is any other information I can provide to help make this more clear, please let me know.&nbsp; Thank</P></BODY></HTML> Wed, 15 Aug 2012 05:45:52 GMT https://live.paloaltonetworks.com/t5/general-topics/accessing-multiple-network-zones-over-ipsec-vpn/m-p/18625#M13578 cmateam 2012-08-15T05:45:52Z Re: Accessing multiple network zones over IPSEC VPN https://live.paloaltonetworks.com/t5/general-topics/accessing-multiple-network-zones-over-ipsec-vpn/m-p/18626#M13579 <HTML><HEAD></HEAD><BODY><P>I've setup a similar setup with two PAN's, do you have a tunnel interface network or only using the IKE to setup the tunnel? I only added the additional routes to the tunnel interface and it's working fine, if it's also allowed in the policy. </P></BODY></HTML> Wed, 15 Aug 2012 10:00:03 GMT https://live.paloaltonetworks.com/t5/general-topics/accessing-multiple-network-zones-over-ipsec-vpn/m-p/18626#M13579 Ante 2012-08-15T10:00:03Z Re: Accessing multiple network zones over IPSEC VPN https://live.paloaltonetworks.com/t5/general-topics/accessing-multiple-network-zones-over-ipsec-vpn/m-p/18627#M13580 <HTML><HEAD></HEAD><BODY><P>I'm using IKE to setup the tunnel, and then have a tunnel established in the second phase. If that makes sense?</P></BODY></HTML> Wed, 15 Aug 2012 14:22:55 GMT https://live.paloaltonetworks.com/t5/general-topics/accessing-multiple-network-zones-over-ipsec-vpn/m-p/18627#M13580 cmateam 2012-08-15T14:22:55Z Re: Accessing multiple network zones over IPSEC VPN https://live.paloaltonetworks.com/t5/general-topics/accessing-multiple-network-zones-over-ipsec-vpn/m-p/18628#M13581 <HTML><HEAD></HEAD><BODY><P>Figured out my problem.&nbsp; Firewall policy rule on FW at Site-B needed to allow me to gain access.</P></BODY></HTML> Wed, 15 Aug 2012 20:27:56 GMT https://live.paloaltonetworks.com/t5/general-topics/accessing-multiple-network-zones-over-ipsec-vpn/m-p/18628#M13581 cmateam 2012-08-15T20:27:56Z