GP portal/gateway config

[S.Byrne]

hello 

I am trying to add a GP portal/gateway to support Radius authentication 

the customer has provided a public IP that I am trying to use 

the IP will not add --there are a list of IP in drop down that I could select

what needs to happen for this new public IP x.x.x.199 to be available to select ?

I created a tunnel.199 and configured the IP but this did not solve the issue 

thank you 

[reaper]

the public IP can be added to the external interface as an additional /32 IP, or you can create a loopback interface to use in your new portal/gw

a tunnel interface is used after the tunnel has been negotiated, so this represents the network interface inside the ipsec tunnel

[S.Byrne]

thank you for all your help -- on the gateway configuration the tunnel interface has to be defined to allow client IP pools to be created 

I have tried a number of tunnel interfaces that match the configuration of existing working GP gateways 

I see the error when I try to validate the commit 

"> remote-user-tunnel 'tunnel.30' is not a valid reference"

remote-user-tunnel 'tunnel.30' is not a valid reference
remote-user-tunnel is invalid

[S.Byrne]

please see attachment 

I have tried different tunnel interfaces but the configuration will not pass validation 

[reaper · Accepted solution]

you're doing this from panorama: are you configuring the globalprotect gateway in the same template as the tunnel interface is configured in? did you create a fresh tunnel interface or are you trying to use one that is already being used by another gateway?