IPSec VPN from PA to Edge gateway

Reply
Highlighted
L4 Transporter

IPSec VPN from PA to Edge gateway

Is it possible to an IPSec VPN connection from a PA 5050 to t Edge gateway appliance and if so how is it done

Highlighted
L7 Applicator

hi @jdprovine

 

The description is a little vague, what is the edge gateway appliance exactly? (is it a router or a modem, does it support ipsec,..?)

 

Assuming it is a (mainstream) router it would be set up in pretty much the same way you'd set up a VPN tunnel to a remote peer

 

-ike properties and crypto map

-ipsec properties and crypto map

-proxyIDs if the peer uses policy based vpn configuration

Tom Piens - PANgurus.com
Find my book at amazon.com/dp/1789956374
Highlighted
L4 Transporter

@reaper

 

I just found out about it in our vendors documentation and I think its this

 

https://www.youtube.com/watch?reload=9&v=eZo3eVGD5Wc

Highlighted
L7 Applicator

At 4:05 he mentions they support ipsec VPN, so that's great :D

he does note that the vpn needs to be from the ESG to the firewall, but that doesn't matter much in the bigger picture (this is actually a good thing for troubleshooting)

 

here's a little video they created on how to set up VPN on their end, our end will look the same as any other remote-peer vpn: https://youtu.be/v8BDczWuPsc 

 

It looks like theyre defining local subnets, so you'll probably need to reproduce that on your firewall by setting proxyIDs

Tom Piens - PANgurus.com
Find my book at amazon.com/dp/1789956374
Highlighted
L4 Transporter

@reaper

I will check out your video and I was thinking we would need proxy ID's, We are trying to set up access for Virtual desktops cloud services via VPN

Highlighted
L4 Transporter

@reaper

good video but a little hard to see with my old eyes

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!