2 site-2-site tunnels between 2 PAN devices

[bsanders]

Hello all,

Would it be possible to setup 2 site-to-site tunnels between 2 PAN devices? I’d like to have 2 “parallel” tunnels to split the traffic in 2 different zones.

Regards,

Stephan van der Plas

[HULK]

Hello Stephan,

As per my understanding, it is possible to create 2 different tunnels between 2 PAN firewall. The only thing is, we have to define 2 proper routes pointing towards correct tunnel interfaces

OR

If you add those different subnets under PROXY ID, It also creates separate phase 2 tunnels between them (with different SPI key).

Thanks

[HULK]

Adding a diagram for better understanding.

[pulukas]

I am a little confused by the question.

Is the reason you want two tunnels to keep traffic separate for policies?

If so, you should be able to accomplish this task with a good zone layout on both firewalls and still use the same tunnel.

can you speak a little more on the communications layout and what you want to secure?