How to configure WOL forwarding through a VPN tunnel

[STBAER]

We connect two firewalls (PA-200 and PA-500) with a VPN tunnel

and want to initiate a WakeOnLan command from one side of the VPN to an pc on the other side.

[OtakarKlier]

Hello,

From what I underastand of WOL, very basic, its a layer 2 operation so it wont route outside of a vlan or subnet. I think its in the way you send the WOL packet rather than the VPN tunnel config.

I found some stuff doing google searchs with the string 'wake on lan over vpn'.

Hope this helps!

[STBAER]

probably its a solution like for Juniper:

http://kb.juniper.net/InfoCenter/index?page=content&id=KB11654

but I cannot recognize a similar one in my PA

Another keyword for my problem: "Broadcast forwarding"

[Alexis_Koch]

Hello,

I know this is an old thread, but since I got the same problem, I just wanted to add: the juniper solution is working. I had the same issue: WoL packets allowed by policy, but droped by the firewall (PA-3020 in my case). I can see it when doing a packet capture on the firewall (stage drop).

On the Palo Alto, you can go on Network -> Interfaces -> (outgoing interface)  -> Advanced -> ARP Entries

You add the broadcast address (192.168.1.255 for exemple), and the mac FF:FF:FF:FF:FF:FF. And the magic packet goes magic!

Regards,

Alexis.

[Sjoerd]

I can also confirm that this is a working solution! Thnx!