topic Re: site to site vpn qestion in General Topics https://live.paloaltonetworks.com/t5/general-topics/site-to-site-vpn-qestion/m-p/31825#M23288 <HTML><HEAD></HEAD><BODY><P>I dont quite understand what you're trying to say in the second sentence. </P></BODY></HTML> Tue, 06 May 2014 18:50:32 GMT dvlacic 2014-05-06T18:50:32Z site to site vpn qestion https://live.paloaltonetworks.com/t5/general-topics/site-to-site-vpn-qestion/m-p/31823#M23286 <HTML><HEAD></HEAD><BODY><P>We're moving from Checkpoint to PAN. For site to site vpns, I'm assuing i should set up a logical subinterface? How do you ensure its floating/shared in an HA cluster?</P></BODY></HTML> Mon, 05 May 2014 17:34:56 GMT https://live.paloaltonetworks.com/t5/general-topics/site-to-site-vpn-qestion/m-p/31823#M23286 dvlacic 2014-05-05T17:34:56Z Re: site to site vpn qestion https://live.paloaltonetworks.com/t5/general-topics/site-to-site-vpn-qestion/m-p/31824#M23287 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>No, just need to create a tunnel interface (one per VPN). Each tunnel in a security zone for having security policies per tunnel (if it make sense for you) of all VPN tunnel interface in same zone.</P><P>After that in cluster, all info will be replicated, interface, zone, policies, and in case of HA, tunnel don't go down.</P><P></P><P>Hope help</P><P></P><P>v.</P></BODY></HTML> Tue, 06 May 2014 14:49:56 GMT https://live.paloaltonetworks.com/t5/general-topics/site-to-site-vpn-qestion/m-p/31824#M23287 VinceM 2014-05-06T14:49:56Z Re: site to site vpn qestion https://live.paloaltonetworks.com/t5/general-topics/site-to-site-vpn-qestion/m-p/31825#M23288 <HTML><HEAD></HEAD><BODY><P>I dont quite understand what you're trying to say in the second sentence. </P></BODY></HTML> Tue, 06 May 2014 18:50:32 GMT https://live.paloaltonetworks.com/t5/general-topics/site-to-site-vpn-qestion/m-p/31825#M23288 dvlacic 2014-05-06T18:50:32Z