Content translations are temporarily unavailable due to site maintenance. We apologize for any inconvenience.
04-27-2022 05:35 PM
Assuming that you're talking about setting up a Site-to-Site IPSec tunnel between StrongSwan and the Palo Alto, this would be a standard IPSec tunnel setup. The last time I set this up we weren't able to get IKEv2 up properly and had to use IKEv1 only, but the client wasn't able to secure time with the vendor to troubleshoot further once things were operational so I didn't spend much time trying to figure out the issue or look at the StrongSwan side of things to see if they had made a mistake on their end.
