topic Re: VPN tunnels on a ubiquiti wireless connection in General Topics

VPN tunnels on a ubiquiti wireless connection

infotech — Wed, 29 Jan 2014 20:23:36 GMT

I have been able to create a vpn tunnel between a PA 3020 and an Cisco ASA 5505, but I am having issues getting a tunnel to come up on a ubiquiti wireless connection. I have checked and the wireless is working fine, it worked before I replaced my cisco asa 5510. Any idea what to check would be helpfull

Re: VPN tunnels on a ubiquiti wireless connection

sraghunandan — Wed, 29 Jan 2014 20:29:38 GMT

Following document will help a great deal

https://live.paloaltonetworks.com/docs/DOC-3671

Re: VPN tunnels on a ubiquiti wireless connection

HULK — Wed, 29 Jan 2014 20:39:07 GMT

Are you able to see any VPN related logs in PAN firewall under Monitor >> System: The system LOGS should show Phase-I and Phase-II negotiation information in details.

1. What mode you have configured for this IpSec tunnel , main or aggressive..?

2. Do you have a Public IP address on both side gateway's...?

3. Do you have a policy to allow IKE from Untrust zone to establish this VPN tunnel...?

3. You can also make the PAN as a VPN responder as mentioned below.

Hope this helps.

Thanks

Re: VPN tunnels on a ubiquiti wireless connection

infotech — Wed, 29 Jan 2014 20:54:01 GMT

Are you able to see any VPN related logs in PAN firewall under Monitor >> System: The system LOGS should show Phase-I and Phase-II negotiation information in details. No I do not see any VPN information in the logs for the wireless

1. What mode you have configured for this IpSec tunnel , main or aggressive..?

auto

2. Do you have a Public IP address on both side gateway's...?

Its configured as layer two but using a virtual router to route out through a public ISP address going to another public IP address on the peer side

3. Do you have a policy to allow IKE from Untrust zone to establish this VPN tunnel...? Yes

3. You can also make the PAN as a VPN responder as mentioned below

Re: VPN tunnels on a ubiquiti wireless connection

infotech — Wed, 29 Jan 2014 21:01:14 GMT

Very good information thanks

Re: VPN tunnels on a ubiquiti wireless connection

pulukas — Sat, 01 Feb 2014 17:59:08 GMT

You can check your configuration against this document outlining how to setup IPSEC VPN when the PA is in Layer 2 mode.

Configuring Site to Site IPSec VPN in Layer 2