Need help on VPN PA firewall to IBM cloud VPN

himanshuj — Fri, 02 Feb 2018 00:59:21 GMT

All,

I am new to Palo Alto World

Really need your Help in understanding how can i create the VPN for the below

1. IBM cloud subnet only 1 subnet so thats okay.

2. Multiple subnets behind my PA firewall, my question is how to NAT them all to go out?

IBM just confirmed that they are using ROUTE based VPN , so i believe i do not need to define proxy IDs?

Customer at my end says you can NAT all our internal traffic . they have given me a private IP subnet to nat the traffic over the VPN however they also need some hosts to hosts bidirectional communication .

Please suggest how to setup this VPN.

Re: Need help on VPN PA firewall to IBM cloud VPN

reaper — Fri, 02 Feb 2018 09:01:45 GMT

please take a look at this article, it is similar and maty be helpful: DotW: Help with IPSec Proxy IDs with overlapping IPs

Since they are route based, this will simplify your config somewhat (you dont need proxy IDs)

on your end you'll need to set a couple of policies :

for the bidirectional IP's i'd recommend creating individual back and forth policies, this makes it a little more clear which policies are used:

topic Re: Need help on VPN PA firewall to IBM cloud VPN in General Topics

Need help on VPN PA firewall to IBM cloud VPN

Re: Need help on VPN PA firewall to IBM cloud VPN