Multiple IPSec tunnels, single external IP

[digdoug]

Looking to set up a POC with a PA-820 that has the following

• IPSec VPN site-to-site between our local facility and 3 partner networks
• Single external IP, 3 tunnels (IKE P2)
• NAT to a single host on our local private network

Is this reasonable/possible?

[SutareMayur]

Hi @digdoug ,

You can create multiple IPSEC tunnels from your Palo Alto’s single external IP and different partner external IPs.

Only thing you need to make sure of properly defining the VPN encryption domain, security and/or NAT policies and routing to differentiate traffic and forward it to right tunnel interface.

Hope it helps!