Configure IPSec between Palo Alto devices

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Configure IPSec between Palo Alto devices

L3 Networker

We have two vpn Palo Alto devices.

One in our HQ departement and one in a remote location.

I need to setup an IPSec VPN tunnel between these sites with the Palo Alto devices but I never did this before.

On the Palo Alto website I found this article which was helpfull https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-IPSec-VPN/ta-p/56535 but the devices does not connect with each other.

Also for our remote location I only want that the traffic to our servers go into the tunnel but internet traffic does not.

Second how can I configure to which server the clients of the remote sites can access?

I need to get al this to work on Wednesday.

1 accepted solution

Accepted Solutions

I found the solution. It is something stupid.

I forgot to create policy rules which allows a connection from zone EXTERN to zone EXTERN with the application ipsec and ike.

View solution in original post

4 REPLIES 4

L2 Linker

Hi Zebit,

 

What's the status of the VPN tunnel? Has it passed phase1-IKE? Can you ping the public IP of the remote site from the HQ firewall? and vice versa?

You can look on this article to have a basic troubleshooting on which part of your VPN setup is not working.

https://live.paloaltonetworks.com/t5/Featured-Articles/DotW-VPN-IPSec-Tunnel-Status-is-Red/ta-p/7922...

Hi theonewhoknocks,

 

The status of the tunnel and IKE is red.

This article is a detailed troubleshooting on a VPN setup. It helped me solve most of my VPN issues. Check it, it may help you.

 

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Troubleshoot-IPSec-VPN-connectivity-...

I found the solution. It is something stupid.

I forgot to create policy rules which allows a connection from zone EXTERN to zone EXTERN with the application ipsec and ike.

  • 1 accepted solution
  • 2738 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!