Wireless and PA200 homelab access

[killboxalpha]

Hi

Iam trying to find a good solution to my home and homelab network.

i put together a drawing of the current layout.

How can i access mye homelab 10.0.0.0/24 via my wireless 192.168.1.0/24 when i am home?

and how can i access my home 192.168.1.0/24 and homelab 10.0.0.0/24 from vpn client when i am not home ?

do i need a subinterface (the "PA" box is the PA200) or how to i go about this (vlan tagging/trunk ?)

Cheers for any input on the issue.

[TranceforLife]

If you are at home you don't need VPN in order to access your local resources. If you are connecting from the internet then you most likely will be landed in the separate zone behind the palo (e,g GP ZONE, just a name really). Then based on the security policies you will permit your traffic to the 10.0.0.0/24 and 192.168.1.0/24. Make sure your routing is correct at Layer 3 boundaries as well as palo permit the traffic between the zones

[Remo]

If the cisco managed switch is a L3-switch: In this case you need to have a route for 10.0.0.0/24 with the cisco managed switch as next hop
If the cisco managed switch is a L2-switch: your topology will probably not work

Why don't you connect your cisco managed switch directly with your PA? On the PA you will need two subinterfaces: one for your homenetwork and one for your lab. This port will be connected to a trunk port on the cisco switch where you will connect an access port to the unmanaged switch for your homenetwork. And in case it is possible (locations of the AP's, enough free ports) you could also connect the AP's to the cisco switch to everything is connected more direct and not in this daisy chain mode.

[killboxalpha · Accepted solution]

so i can choose from these alternatives:

Layer 3

And there is the subinterface option.

[Remo]

Exactly. Both of these alternatives look good 😉