How to setup multiple vpn?

[ZEBIT]

Hi,

In our enviroment we have since a month a PA500. We setup VPN with pre-logon with certificate for our internal users, which is very handy!

But for our external users I want, they use there AD credentials. Is it possible to setup multiple VPN's? One for our internal users and one for our external users?

And if so, how to configure this?

Thanks in advance.

[Westcon2]

Yes you can.

This can be done only if you are using a physical interface with two public IP address

Create seperate portal and  gateway with for two different groups.

Regards

Aamir Khan

[ZEBIT]

Palo Alto just let me know I need a second license for this? Correct or not?

[Westcon2]

As long as you are using two different ip address. You don't need a license in this case

Create two portals and two gateways in a single box.

[ZEBIT]

Hi Westvon2,

Thanks for the help. I can use the same physical interface as I use now?

[Westcon2 · Accepted solution]

yes same interface.  just add one more ip address.

Regards

Aamir Khan

[ZEBIT]

Thanks again, I'm gonna try it out and let you know something. I own you one.

[ZEBIT]

Hi Westcon2,

I created a second portal with a new extern ip adres. So now I have a portal for my intern users with pre-logon and a portal for extern users with on-demand vpn. But when I connect the globalprotect to this portal the authentication doesn't work. So I think I need a second gateway. Is it?

I created a second gateway and its all working. Thank you so much! How can I make sure only specific users can login through this portal?

[Westcon2]

Thank You

Aamir Khan

[Westcon2]

Try the with configuring groups in the user tab under client configuration

[ZEBIT]

I did, but still everybody is allowed.

Thanks for all the help!