PBF issue when routing VPN flow to AWS

Reply
Highlighted
L2 Linker

PBF issue when routing VPN flow to AWS

Hello Community,

 

I need help on this topic :

How can I configure PBF to route VPN flow to AWS on PaloAlto Firewall?

Thank you for help !


Accepted Solutions
Highlighted
L4 Transporter

@Stephen24 Because this is the only supported by AWS setup. . You can possibly use PBF on the PA end to send traffic to one of the VPN tunnels, but without BGP, there will be no way for the AWS VPN gateways to know which of the tunnel to send the traffic to. 

View solution in original post


All Replies
Highlighted
L4 Transporter

Is there a specific reason you need to use PBF? AWS provides a detailed template on using BGP with VPN connections to PAs.

Highlighted
L2 Linker

Hello,

Thank you for your reply

Are you talking about this topic  : https://docs.aws.amazon.com/vpc/latest/adminguide/palo-alto.html

?

We would like to make it work with PBF

 

Thks!

Highlighted
L4 Transporter

Yes, that's the basis of it. The addresses and variables in that link won't be correct for your implementation. The AWS portal will provide the configuration specific to your environment.

Highlighted
L2 Linker

...so,why PBF will not work with this implementation?

 

Thks

Highlighted
L4 Transporter

@Stephen24 Because this is the only supported by AWS setup. . You can possibly use PBF on the PA end to send traffic to one of the VPN tunnels, but without BGP, there will be no way for the AWS VPN gateways to know which of the tunnel to send the traffic to. 

View solution in original post

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!