topic Site-to-Site VPN use PPPoE in General Topics

Site-to-Site VPN use PPPoE

Metgatz — Wed, 14 Jul 2021 18:38:44 GMT

Site-to-Site VPN with PPPoE

Good afternoon, please help me to confirm if the following scenarios are compatible or not.

- Palo Alto with Interface in DHCP mode ( with private IP - Typical example ADLS modem delivering a Private IP ) establish a site-2-site vpn tunnel with another Palo Alto with Public IP.

-Palo Alto with interface in PPPoE mode (with Public IP) establish a Site-2-Site VPN tunnel with another Palo Alto with Public IP.

Thank you very much, best regards

Re: Site-to-Site VPN use PPPoE

reaper — Thu, 15 Jul 2021 12:46:02 GMT

1. yes, you do need to enable NAT-T, then set the local-ID on the dynamic peer, and add the same ID as 'remote ID' on the static peer. the static peer also needs to be set as 'passive' so it doesn't try to connect to the dynamic peer

2. yes, simply use the local-ID on the dynamic peer and remote-ID on the static peer

the id can be any FQDN or email address (doesn't need to be real or resolve to anything, it just needs to match on both peers)