topic Re: PAN as VPN Client ipsec psk+xauth in General Topics

PAN as VPN Client ipsec psk+xauth

mheartbeat — Thu, 26 May 2016 11:54:24 GMT

I am a bit new at VPN stuff - I have a PAN-500, i configured VPN for users just fine (IPSec+xauth "cisco compatible" so it works with pretty much anything), as well as static site to site IPSec tunnels.

What I cannot figure out how to do is make my box be a client, in this case I want to connect to Cisco Devnet Labs, which works fine with a cisco router (crypto ipsec client ezvpn) or generic setup on a shrewsoft client. It seems silly if my Palo Alto box wouldnt support ipsec psk+xauth client setup in some fashion?

I looked around but can't really find options for it, and very little in any forums or searching.

Re: PAN as VPN Client ipsec psk+xauth

santonic — Thu, 26 May 2016 13:42:41 GMT

Don't think you can use PA box as an xauth client.

But you have many options to set site to site IPSEC tunnel which makes more sense for a FW imo.

Re: PAN as VPN Client ipsec psk+xauth

mheartbeat — Thu, 26 May 2016 14:15:15 GMT

I dont have control of the other end - I am just trying to avoid having to configure 15 different devices with a client setup when it would be so easy to route with the PAN box.

i guess I should put in a feature request