topic Re: 2 site-2-site tunnels between 2 PAN devices in General Topics

2 site-2-site tunnels between 2 PAN devices

bsanders — Thu, 06 Mar 2014 13:31:45 GMT

Hello all,

Would it be possible to setup 2 site-to-site tunnels between 2 PAN devices? I’d like to have 2 “parallel” tunnels to split the traffic in 2 different zones.

Regards,

Stephan van der Plas

Re: 2 site-2-site tunnels between 2 PAN devices

HULK — Thu, 06 Mar 2014 16:08:21 GMT

Hello Stephan,

As per my understanding, it is possible to create 2 different tunnels between 2 PAN firewall. The only thing is, we have to define 2 proper routes pointing towards correct tunnel interfaces

If you add those different subnets under PROXY ID, It also creates separate phase 2 tunnels between them (with different SPI key).

Thanks

Re: 2 site-2-site tunnels between 2 PAN devices

HULK — Thu, 06 Mar 2014 16:36:01 GMT

Adding a diagram for better understanding.

Re: 2 site-2-site tunnels between 2 PAN devices

pulukas — Thu, 06 Mar 2014 20:28:19 GMT

I am a little confused by the question.

Is the reason you want two tunnels to keep traffic separate for policies?

If so, you should be able to accomplish this task with a good zone layout on both firewalls and still use the same tunnel.

can you speak a little more on the communications layout and what you want to secure?