topic Re: Site to Site VPN between PA200 and any third party device. in General Topics

Site to Site VPN between PA200 and any third party device.

abdulvahab — Thu, 28 Jul 2016 07:13:58 GMT

Hi all

Please help me to sort out the situation below.

We have one PA 200 is working fine in the main office. The main office have the static WAN IP and it is acting as the SSL VPN gateway. Now, we need to connect a small brach office to main office through site to site VPN. The banch office doesn not have the static WAN IP. what are the cheapest options as the company cannot afford another PA unit and static IP. Please suggest any third party cheap vpn device which will work with the PA 200.

Thanks in advance.

Re: Site to Site VPN between PA200 and any third party device.

reaper — Thu, 28 Jul 2016 12:16:37 GMT

You can set one peer as dynamic and one as static. the static one would need to be in passive mode as it will not be able to create the vpn tunnel

Re: Site to Site VPN between PA200 and any third party device.

TranceforLife — Thu, 28 Jul 2016 14:02:13 GMT

Hi,

Just check for a SOHO router that supports site2site VPN. Use free DDNS and link your external IP address to have a DNS name. l am using this web site:

https://www.changeip.com/dns.php

Found this with TP-Link routers

http://www.tp-link.com/en/article-380.html

Cheers

Re: Site to Site VPN between PA200 and any third party device.

abdulvahab — Sat, 30 Jul 2016 11:57:14 GMT

@reaper wrote:
You can set one peer as dynamic and one as static. the static one would need to be in passive mode as it will not be able to create the vpn tunnel

Thank you for the reply

So in this case, i have to use both side PA device. Branch site we would like to use any third party SOHO device with dynamic WAN IP.

Re: Site to Site VPN between PA200 and any third party device.

abdulvahab — Sat, 30 Jul 2016 12:02:08 GMT

@TranceforLife wrote:
Hi,

Just check for a SOHO router that supports site2site VPN. Use free DDNS and link your external IP address to have a DNS name. l am using this web site:

https://www.changeip.com/dns.php

Found this with TP-Link routers

http://www.tp-link.com/en/article-380.html

Cheers

Thank you for the suggestion.

But my concern is how to use the TP Link in the branch side only as PA alredy deployed in the head office?

Re: Site to Site VPN between PA200 and any third party device.

TranceforLife — Sat, 30 Jul 2016 20:27:47 GMT

Hi,

The second firewall doesn't have to be a PA. Could be any but must support site-to-site IPsec VPN.

Cheers

Re: Site to Site VPN between PA200 and any third party device.

abdulvahab — Sun, 31 Jul 2016 02:27:00 GMT

@TranceforLife wrote:
Hi,

The second firewall doesn't have to be a PA. Could be any but must support site-to-site IPsec VPN.

Cheers

thank you..