PA2020 Proxy ID Limitations

[harsh01]

Hi,

I am configuring a VPN Tunnel between a PA2020 and a Cisco ASA. The PA is running version 3.1.5.

The PA is obviously route based VPN's... The Cisco ASA uses policies or encryption domains/ACL's to define what traffic is allowed down the VPN.

So in order to get this working we have used Proxy ID's to define the traffic that is allowed down the tunnel on the PA. Does anyone know if there is a limit on the number of Proxy ID's that can be configured on the PA? As I know that on the Cisco ASA the ACL or encryption domain can be pretty big!

Any help would be appreciated...

Many Thanks

Harsh

[mharding · Accepted solution]

I've read that it's 10 proxy IDs per tunnel.

[harsh01]

Hi,

Thanks for the reply. That is really helpful. I guess if we need more then 10 proxy IDs then we can configure another tunnel with the same phase 1 attributes and different phase 2. I'll give this a try...

Many Thanks again for your reply and help

Kind Regards

Harsh