topic Re: PBF issue when routing VPN flow to AWS in General Topics

PBF issue when routing VPN flow to AWS

Stephen24 — Tue, 29 Oct 2019 15:06:08 GMT

Hello Community,

I need help on this topic :

How can I configure PBF to route VPN flow to AWS on PaloAlto Firewall?

Thank you for help !

Re: PBF issue when routing VPN flow to AWS

rmfalconer — Tue, 29 Oct 2019 16:11:19 GMT

Is there a specific reason you need to use PBF? AWS provides a detailed template on using BGP with VPN connections to PAs.

Re: PBF issue when routing VPN flow to AWS

Stephen24 — Tue, 29 Oct 2019 17:00:56 GMT

Hello,

Thank you for your reply

Are you talking about this topic : https://docs.aws.amazon.com/vpc/latest/adminguide/palo-alto.html

We would like to make it work with PBF

Thks!

Re: PBF issue when routing VPN flow to AWS

rmfalconer — Tue, 29 Oct 2019 20:03:00 GMT

Yes, that's the basis of it. The addresses and variables in that link won't be correct for your implementation. The AWS portal will provide the configuration specific to your environment.

Re: PBF issue when routing VPN flow to AWS

Stephen24 — Wed, 30 Oct 2019 08:02:49 GMT

...so,why PBF will not work with this implementation?

Thks

Re: PBF issue when routing VPN flow to AWS

BatD — Wed, 30 Oct 2019 08:53:50 GMT

@Stephen24 Because this is the only supported by AWS setup. . You can possibly use PBF on the PA end to send traffic to one of the VPN tunnels, but without BGP, there will be no way for the AWS VPN gateways to know which of the tunnel to send the traffic to.