Multiple Tunnels with 0.0.0.0/0 proxy-ids

Charles_Cabico — Thu, 12 Nov 2015 01:11:18 GMT

The scenario is 3 firewalls, with PA-HO acting as the hub and PA-1 and PA-2 as the branch sites. The Branch sites connect to the head office network via ipsec tunnels to PA-HO and vice-versa.

Due to multple dis-contigous subnets on the branches, it was decided to use 0.0.0.0/0 proxy-ids for the tunnels. This was proven to work for the PA-HO and PA-1 tunnel (both local and remote networks set to 0.0.0.0/0).

Would it be possible to set the proxy-id for tunnel between PA-HO and PA-2 as 0.0.0.0/0 as well.

Many thanks in advance for your comments/feedback.

Re: Multiple Tunnels with 0.0.0.0/0 proxy-ids

Raido_Rattameister — Thu, 12 Nov 2015 01:15:46 GMT

If vpn is between Palo firewalls then Proxy id is not needed.

If you leave it blank then it will use 0.0.0.0/0 by default.

You can create proxy id's if you do vpn with other vendors who use it.

Palo uses routing table to send traffic into vpn tunnel not proxy id.

topic Re: Multiple Tunnels with 0.0.0.0/0 proxy-ids in General Topics

Multiple Tunnels with 0.0.0.0/0 proxy-ids

Re: Multiple Tunnels with 0.0.0.0/0 proxy-ids