topic Re: vpn between nortel and PA-500 in General Topics

vpn between nortel and PA-500

Aslidin — Mon, 24 Oct 2011 08:11:56 GMT

Hi All,

I have nortel vpn router 1750 in our main site and PA-500 in the branch, I need ipsec tunnel between devices. Nortel has static IP, but PA dynamic. I found that Nortel has site-to-site, initiator and responder options. which option I have to use site-to site or responder? can PA become Initiator in this case?

Thank you.

Re: vpn between nortel and PA-500

rapoint_person — Mon, 24 Oct 2011 09:59:34 GMT

As you have a Dynamic IP on one of the boxes I suggest you setup aggressive-mode VPN. As the PAN is using a dynamic IP it's best if the PAN inititates the tunnel.

Re: vpn between nortel and PA-500

dpalani — Sat, 20 Jul 2013 22:38:56 GMT

Hi,

The dynamic ip is always the initiator in a site to site vpn where one of the peers is dynamic. There is no way to static peer can be the initiator.

Reason being the static has no idea about its peer's ip address if it wants to act as an initiator.

Regards