topic Re: VPN from Palo to Cloud – Physical Interface or Loopback? in General Topics

VPN from Palo to Cloud – Physical Interface or Loopback?

Networksteam — Wed, 27 Jan 2021 15:52:10 GMT

Just wondering what is best practice for this?

We have a /29 on our outside interface. We are using the IP assigned for client NAT translation.

Over the coming months we’ll be configuring several VPNs to the same cloud provider.

Should these terminate via a loopback or just on the physical interface and we should add an address to the physical interface?

Re: VPN from Palo to Cloud – Physical Interface or Loopback?

ThomasYarger — Wed, 27 Jan 2021 16:20:06 GMT

Hello,

I typically use a loopback interface to save a physical port. I don't believe there is a right/wrong answer here just depending on your requirements and preference. I hope this helps.

Re: VPN from Palo to Cloud – Physical Interface or Loopback?

Networksteam — Thu, 28 Jan 2021 08:30:58 GMT

Thanks.

We use Global Protect via a loopback.

I think I will use the physical outside interface for VPN, and keep it simple.