topic Re: Wireless and PA200 homelab access in General Topics

Wireless and PA200 homelab access

killboxalpha — Sat, 10 Jun 2017 19:54:51 GMT

Iam trying to find a good solution to my home and homelab network.

i put together a drawing of the current layout.

How can i access mye homelab 10.0.0.0/24 via my wireless 192.168.1.0/24 when i am home?

and how can i access my home 192.168.1.0/24 and homelab 10.0.0.0/24 from vpn client when i am not home ?

do i need a subinterface (the "PA" box is the PA200) or how to i go about this (vlan tagging/trunk ?)

Cheers for any input on the issue.

Re: Wireless and PA200 homelab access

TranceforLife — Sat, 10 Jun 2017 20:38:22 GMT

If you are at home you don't need VPN in order to access your local resources. If you are connecting from the internet then you most likely will be landed in the separate zone behind the palo (e,g GP ZONE, just a name really). Then based on the security policies you will permit your traffic to the 10.0.0.0/24 and 192.168.1.0/24. Make sure your routing is correct at Layer 3 boundaries as well as palo permit the traffic between the zones

Re: Wireless and PA200 homelab access

Remo — Sat, 10 Jun 2017 21:08:12 GMT

If the cisco managed switch is a L3-switch: In this case you need to have a route for 10.0.0.0/24 with the cisco managed switch as next hop
If the cisco managed switch is a L2-switch: your topology will probably not work

Why don't you connect your cisco managed switch directly with your PA? On the PA you will need two subinterfaces: one for your homenetwork and one for your lab. This port will be connected to a trunk port on the cisco switch where you will connect an access port to the unmanaged switch for your homenetwork. And in case it is possible (locations of the AP's, enough free ports) you could also connect the AP's to the cisco switch to everything is connected more direct and not in this daisy chain mode.

Re: Wireless and PA200 homelab access

killboxalpha — Wed, 14 Jun 2017 05:37:11 GMT

so i can choose from these alternatives:

Layer 3

And there is the subinterface option.

Re: Wireless and PA200 homelab access

Remo — Wed, 14 Jun 2017 15:42:12 GMT

Exactly. Both of these alternatives look good 😉