Proxy ID's and routes needed?

[Schneur_Feldman]

Team,

If I am building a tunnel to a Policy Based device and I configure Proxy ID's do I need to add routes for the VPN as well on the Palo?

Or just Proxy IDs?

[TomYoung · Accepted solution]

Hi @Schneur_Feldman ,

Yes, you need routes to the tunnel interface in order to route the traffic.  The Proxy IDs are only used to negotiate the tunnel.

Thanks,

Tom

[HuiNita · Accepted solution]

When building a tunnel to a Policy Based device and configuring Proxy ID's, it is necessary to add routes for the VPN as well on the Palo. Proxy IDs are used to identify which traffic should be sent across the VPN tunnel, but routes are necessary to direct that traffic to the correct destination.