This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About smshafek
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About smshafek
04-11-2023
13Posts
1Like
0Solutions
Apr 11, 2023Last Visited
User
Activity
User
Profile
Latest posts by smshafek
| Subject | Views | Posted |
|---|---|---|
| 1389 | 08-21-2022 11:16 PM | |
| 3427 | 06-27-2022 08:16 AM | |
| 3453 | 06-27-2022 06:28 AM | |
| 939 | 06-22-2022 05:08 AM | |
| 2477 | 06-14-2022 01:40 AM | |
| 2516 | 06-13-2022 02:01 AM | |
| 2695 | 06-10-2022 05:28 AM | |
| 1296 | 05-11-2022 07:38 AM | |
| 2699 | 05-11-2022 07:30 AM | |
| 2386 | 05-04-2022 07:03 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 06-27-2022 06:28 AM |
User Badges
Community Statistics
| Member Since | 04-27-2022 07:16 AM |
| Date Last Visited | 04-11-2023 08:49 AM |
| Posts | 13 |
| Total Likes Received | 1 |
08-21-2022
11:16 PM
Hi @Gaurav.Singh, - In case you have made specific zones for your GRE Tunnels, have you tried establishing a policy in security that allows the different zones to reach each other? (GRE to WAN, LAN to GRE etc) - From what I've tested, there are two options ; a. Policy based forwarding + Path monitoring (in your case, have you enabled path monitoring?) b. enabling GRE Keepalives From there you would need to configure the routes so that traffic goes through the tunnels. The tunnels would need different metrics to allow failover. Hope this could help! Feel free to update and we can look into it again if it doesn't work.
... View more
06-27-2022
08:16 AM
Hi @aleksandar.astardzhiev , Thanks for the reply. I'm using pure GRE with no IPsec and I was following the documentation from zscaler. The failover works now. It seems the solution is either, PBF and path monitor, OR keepalives. My configuration was as such that both path monitor and keepalives were active and it didn't work out. I've also configured the two static routes with different metrics. On a side note, why is there PBF anyway? Thanks again for the reply, it was really helpful.
... View more
06-27-2022
06:28 AM
1 Kudo
Hello, I have two Destination IPs (one for each GRE Tunnel to Zscaler). How would I need to configure my palo alto firewall to allow GRE Tunnel Failover, so that traffic only flows through the primary tunnel and flows through the secondary tunnel when the first one fails? Thanks!
... View more
- Tags:
- failover
06-22-2022
05:08 AM
Hi, I'm creating tunnels from my Palo Alto Firewall to Zscaler and have been trying to ping Zscaler's Global IP. What sort of policies are needed to allow traffic to pass into GRE Tunnels? (and/or NAT, Policy based forwarding) Thanks!
... View more
06-14-2022
01:40 AM
Hi Pavel, it shows in the system logs critical and "Tunnel GRE-ZSC is going down" for both tunnels. I've also configured policy based forwarding and in the system logs it shows "Vsys 1 PBF rule GRE-ZSC nexthop is going down". I'm not sure how I should continue with troubleshooting from here. Thanks again!
... View more
06-13-2022
02:01 AM
Hi @PavelK it shows for both tunnel status and event reason none and none. Yes, I have enabled GRE keepalive in Palo Alto. I've created two tunnel interfaces, set up the GRE Tunnels for the two interfaces, enabled NAT and policy based forwarding. Do I have to add a next hop in the policy based forwarding? And which IP Address should I enter for tunnel monitoring? Thanks!
... View more
06-10-2022
05:28 AM
Hi, I've been trying to create GRE Tunnels to connect with Zscaler. It works and I can see traffic flow through but the tunnels keep going down after about 5 minutes. What should I be watching out for? Thanks!
... View more
05-11-2022
07:38 AM
I have a 9.0.1 PA-220. Is there anyway of updating it so I could access Prisma Access?
... View more
05-11-2022
07:30 AM
Hi! is set up of prisma access possible without panorama? Thanks!
... View more
05-04-2022
07:03 AM
Hi Pavel, I'm able to capture the traffic now. Many thanks again!
... View more
05-04-2022
06:37 AM
Hi Pavel, I'm capturing traffic on the two hosts. One connected to the LAN of PA220 and the other to the LAN of PA200. Best regards
... View more
05-04-2022
05:41 AM
Hello, I've configured a VPN Tunnel from a PA220 to a PA200. They are able to ping each other but I don't see any ESP Packets in Wireshark. What should I do to get the packets to be encapsulated? Many thanks in advanced.
... View more
04-29-2022
05:33 AM
Hi, I've been trying to get clients on the end of two different Palo Altos to be able to ping each other. Everything is green but the IPsec Tunnel doesnt seem to be working. Using tracert, traffic from a client first hops to the LAN Port and then to the opposite end of the tunnel and stops there. I've already created policies that allows traffic from LAN to VPN and vice versa. Full 'Picture' PA 1 Client : 10.10.254.100 LAN : 10.10.254.1 Tunnel IP : 192.168.4.254 PA 2 Client : 10.10.253.100 LAN : 10.10.253.1 Tunnel IP : 172.20.3.253 On tracert from client (10.10.254.100) on PA 1's side : 10.10.254.1 -> 172.20.3.253 Any suggestions? Thanks!
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks