topic Re: Proxy IDs and routing in General Topics

Proxy IDs and routing

BatD — Tue, 12 Mar 2019 07:25:32 GMT

When having Site-to-Site VPN with Proxy IDs, do we still need to configure static route with next-hop the VPN tunnel interface or will traffic matching the proxy IDs be sent over the tunnel regardless of static routes?

Re: Proxy IDs and routing

Remo — Wed, 13 Mar 2019 00:09:45 GMT

Hi @BatD

Yes, you still need to configure the routes in the virtual router.

Re: Proxy IDs and routing

Raido_Rattameister — Wed, 13 Mar 2019 12:26:53 GMT

Palo has ProxyID only to make other end happy and to be able to match identical VPN config.

It is not using ProxyID at all to decide where thraffic should be routed. Palo uses route based vpn not policy based.

If you don't configure ProxyID Palo will use default 0.0.0.0/0 ProxyID.