topic Re: IPSec VPN tunnel question, Proxy-ID and peer IP same? in General Topics

IPSec VPN tunnel question, Proxy-ID and peer IP same?

MichaelSmith2 — Fri, 10 Jul 2020 13:00:40 GMT

I am creating a static routing IPSec VPN tunnel with a 3rd party. The 3rd party wishes to NAT their hosts to their peer IP, which means the remote peer IP will be the same as the proxy-ID IP. How do I support this?

Re: IPSec VPN tunnel question, Proxy-ID and peer IP same?

Thyrion — Thu, 16 Jul 2020 14:10:09 GMT

are you able to not use proxy-IDs (does the remote support route-based vpn or do they only do policy based vpn?)

if you are able to not use proxy-ID, NAT inside the tunnel should work if you delimit the source/destination zones and networks in the NAT policy

Re: IPSec VPN tunnel question, Proxy-ID and peer IP same?

SDart — Fri, 08 Dec 2023 19:35:32 GMT

Was this ever figured out... I'm in a similar circumstance.

Re: IPSec VPN tunnel question, Proxy-ID and peer IP same?

OtakarKlier — Fri, 08 Dec 2023 20:36:15 GMT

Hello,

The proxy ID's are only for the networks behind the firewall not the IP of the firewall itself.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClE6CAK

Hope this helps.