topic PA2020 Proxy ID Limitations in General Topics

PA2020 Proxy ID Limitations

harsh01 — Thu, 12 May 2011 15:40:53 GMT

Hi,

I am configuring a VPN Tunnel between a PA2020 and a Cisco ASA. The PA is running version 3.1.5.

The PA is obviously route based VPN's... The Cisco ASA uses policies or encryption domains/ACL's to define what traffic is allowed down the VPN.

So in order to get this working we have used Proxy ID's to define the traffic that is allowed down the tunnel on the PA. Does anyone know if there is a limit on the number of Proxy ID's that can be configured on the PA? As I know that on the Cisco ASA the ACL or encryption domain can be pretty big!

Any help would be appreciated...

Many Thanks

Harsh

Re: PA2020 Proxy ID Limitations

mharding — Thu, 12 May 2011 16:52:44 GMT

I've read that it's 10 proxy IDs per tunnel.

Re: PA2020 Proxy ID Limitations

harsh01 — Thu, 12 May 2011 20:14:28 GMT

Hi,

Thanks for the reply. That is really helpful. I guess if we need more then 10 proxy IDs then we can configure another tunnel with the same phase 1 attributes and different phase 2. I'll give this a try...

Many Thanks again for your reply and help

Kind Regards

Harsh