Site-to-Site VPN use PPPoE

cancel
Showing results for 
Search instead for 
Did you mean: 

Site-to-Site VPN use PPPoE

L3 Networker

Site-to-Site VPN with PPPoE

Good afternoon, please help me to confirm if the following scenarios are compatible or not.

 

- Palo Alto with Interface in DHCP mode ( with private IP - Typical example ADLS modem delivering a Private IP ) establish a site-2-site vpn tunnel with another Palo Alto with Public IP.

-Palo Alto with interface in PPPoE mode (with Public IP) establish a Site-2-Site VPN tunnel with another Palo Alto with Public IP.

 

Thank you very much, best regards

 

High Sticker
1 REPLY 1

Cyber Elite
Cyber Elite

1. yes, you do need to enable NAT-T, then set the local-ID on the dynamic peer, and add the same ID as 'remote ID' on the static peer. the static peer also needs to  be set as 'passive' so it doesn't try to connect to the dynamic peer

2. yes, simply use the local-ID on the dynamic peer and remote-ID on the static peer

 

the id can be any FQDN or email address (doesn't need to be real or resolve to anything, it just needs to match on both peers)

Tom Piens
PANgurus
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!