How to make PA side as intiator for VPN with Azure

Reply
L4 Transporter

How to make PA side as intiator for VPN with Azure

We want to make Palo Alto side as intiator for VPN with Azure .

 

Currently we have IKE settings as aes256,3des , sha1 sha256 and group 2 .

with lifetime less that azure standard 28800

 

still we are seeing PA acting as responder.

 

Basically issue is with PA is responder we are facing packet loss with azure resources.

 

below is article we reffered.

 

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-devices#azure-gateway-as-re...

Tags (3)
L7 Applicator

Re: How to make PA side as intiator for VPN with Azure

Hello,

I guess why would you want to? The responder has better diagnostic logging if there is an issue with the tunnel.

 

Regards,

L4 Transporter

Re: How to make PA side as intiator for VPN with Azure

As per me we can only make PA as passive where it becomes responder.

Will see if option to make PA as initator is manually possible ?

L4 Transporter

Re: How to make PA side as intiator for VPN with Azure

we are seeing strange behaviour when palo alto act as responder we are seeing packet with resources on azure.

 

so looking for option if we can make PA side as initiator.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!