PBF issue when routing VPN flow to AWS

Reply
L1 Bithead

PBF issue when routing VPN flow to AWS

Hello Community,

 

I need help on this topic :

How can I configure PBF to route VPN flow to AWS on PaloAlto Firewall?

Thank you for help !

L4 Transporter

Re: PBF issue when routing VPN flow to AWS

Is there a specific reason you need to use PBF? AWS provides a detailed template on using BGP with VPN connections to PAs.

L1 Bithead

Re: PBF issue when routing VPN flow to AWS

Hello,

Thank you for your reply

Are you talking about this topic  : https://docs.aws.amazon.com/vpc/latest/adminguide/palo-alto.html

?

We would like to make it work with PBF

 

Thks!

Highlighted
L4 Transporter

Re: PBF issue when routing VPN flow to AWS

Yes, that's the basis of it. The addresses and variables in that link won't be correct for your implementation. The AWS portal will provide the configuration specific to your environment.

L1 Bithead

Re: PBF issue when routing VPN flow to AWS

...so,why PBF will not work with this implementation?

 

Thks

L4 Transporter

Re: PBF issue when routing VPN flow to AWS

@Stephen24 Because this is the only supported by AWS setup. . You can possibly use PBF on the PA end to send traffic to one of the VPN tunnels, but without BGP, there will be no way for the AWS VPN gateways to know which of the tunnel to send the traffic to. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!