topic Using GP on with multiple vsys' and a shared gateway? in General Topics https://live.paloaltonetworks.com/t5/general-topics/using-gp-on-with-multiple-vsys-and-a-shared-gateway/m-p/34514#M25321 <HTML><HEAD></HEAD><BODY><P>I have to be missing something completely logical here. We just deployed our pair of PA-5050's and I am in the process of setting up what I thought was going to be a simple GP VPN for remote management use. </P><P></P><P>When setting up the gateway and portal, it only gives me the option to use the local trusted interface for that vsys. In prior, smaller scale deployments, I always thought the external untrusted IP went here, but I believe it is unavailable due to the fact it is assigned to a shared gateway.</P><P><SPAN style="font-size: 10pt; line-height: 1.5em;"><BR /></SPAN></P><P><SPAN style="font-size: 10pt; line-height: 1.5em;">I attempted to create a static nat with an available IP and NAT it to the internal trusted </SPAN>interface<SPAN style="font-size: 10pt; line-height: 1.5em;"> on that vsys that was used in the GP Portal/GW config, however I receive no Global Protect login prompt, just an immediate "no data received" and the GP client errors out immediately. </SPAN></P><P></P><P>Am I missing something completely logical and apparent here? I combed through the PAN-OS admin documentation but couldn't find anything addressing these scenario. </P><P></P><P>Thanks in advance for any thoughts.</P></BODY></HTML> Sat, 03 Jan 2015 15:27:58 GMT twecbiancotti 2015-01-03T15:27:58Z Using GP on with multiple vsys' and a shared gateway? https://live.paloaltonetworks.com/t5/general-topics/using-gp-on-with-multiple-vsys-and-a-shared-gateway/m-p/34514#M25321 <HTML><HEAD></HEAD><BODY><P>I have to be missing something completely logical here. We just deployed our pair of PA-5050's and I am in the process of setting up what I thought was going to be a simple GP VPN for remote management use. </P><P></P><P>When setting up the gateway and portal, it only gives me the option to use the local trusted interface for that vsys. In prior, smaller scale deployments, I always thought the external untrusted IP went here, but I believe it is unavailable due to the fact it is assigned to a shared gateway.</P><P><SPAN style="font-size: 10pt; line-height: 1.5em;"><BR /></SPAN></P><P><SPAN style="font-size: 10pt; line-height: 1.5em;">I attempted to create a static nat with an available IP and NAT it to the internal trusted </SPAN>interface<SPAN style="font-size: 10pt; line-height: 1.5em;"> on that vsys that was used in the GP Portal/GW config, however I receive no Global Protect login prompt, just an immediate "no data received" and the GP client errors out immediately. </SPAN></P><P></P><P>Am I missing something completely logical and apparent here? I combed through the PAN-OS admin documentation but couldn't find anything addressing these scenario. </P><P></P><P>Thanks in advance for any thoughts.</P></BODY></HTML> Sat, 03 Jan 2015 15:27:58 GMT https://live.paloaltonetworks.com/t5/general-topics/using-gp-on-with-multiple-vsys-and-a-shared-gateway/m-p/34514#M25321 twecbiancotti 2015-01-03T15:27:58Z Re: Using GP on with multiple vsys' and a shared gateway? https://live.paloaltonetworks.com/t5/general-topics/using-gp-on-with-multiple-vsys-and-a-shared-gateway/m-p/34515#M25322 <HTML><HEAD></HEAD><BODY><P>Figured it out. Missed an IP address within the GP gateway config beneath the interface selection. Knew it was something crazy simple. All good now. </P></BODY></HTML> Sat, 03 Jan 2015 16:57:21 GMT https://live.paloaltonetworks.com/t5/general-topics/using-gp-on-with-multiple-vsys-and-a-shared-gateway/m-p/34515#M25322 twecbiancotti 2015-01-03T16:57:21Z