Site-To-Site VPN with payed VPN Providers

[LeonardoMachado]

I would like to test this hypothetical scenario it is possible :

* I have an account with 3 vpn providers (i.e. NordVpn, PIA, Boleh)

* I would like to create 3 (or more) vpn tunnels (at least one tunnel with each vpn provider)

* I will route different traffics (route by source) to each vpn tunnel

Is it possible with Palo Alto?

Does anybody have I blog or document describing how to set up VPN Site-to-Site with VPN Companies like the ones I have listed above?

Thank you.

[SutareMayur · Accepted solution]

@LeonardoMachado,

Yes it is possible. As you want to route traffic over different tunnels based on the source, you can use Policy Based Forwarding rule to do so. You just need to select desired tunnel interface as a Egress interface under Forwarding and next hop would be none.

Below few articles will help you to get details on VPN tunnel creation and PBF.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGkCAK

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRzCAK

Hope it helps!

Mayur

[Pete123]

Hi, I'm trying to do this but can't get the PANs connection to Nord working for a site to site, did you get this working?

Cheers