Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
- COVID-19 Response Center
About cft14server
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About cft14server
09-20-2017
7Posts
1Like
0Solutions
Sep 20, 2017Last Visited
User
Activity
User
Profile
Latest posts by cft14server
| Subject | Views | Posted |
|---|---|---|
| 3597 | 05-12-2014 06:12 AM | |
| 3597 | 05-12-2014 04:22 AM | |
| 3597 | 05-08-2014 06:54 AM | |
| 4024 | 05-02-2014 01:15 AM | |
| 1044 | 01-17-2014 08:05 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 05-02-2014 01:15 AM |
User Badges
Community Statistics
| Member Since | 01-17-2014 05:45 AM |
| Date Last Visited | 09-20-2017 11:03 AM |
| Posts | 7 |
| Total Likes Received | 1 |
12-14-2014
04:04 AM
cft14server wrote:
Basically the remote IKE gateways's IP address is the same as the IP address for the GRE tunnel endpoint making me thing the GRE tunnel terminates on the peer's ASA.
I'm guessing this is the problem because the PA will have two routes for the same public IP address, one using the internet and one using the VPN tunnel interface?
I don't believe you can make this work for the reason you outline. If we route correctly for the tunnel end point then the tunnel traffic will not work and vice versa. I've seen that checkpoint firewalls have a built in feature to allow the same address be used for both the endpoint and tunnel traffic and can manage this on the firewall. But I am pretty sure neither the ASA or the PA will be able to do so. Is there any chance the ASA can separate these into two addresses?
... View more
01-17-2014
05:03 PM
Thanks for providing clarity of your purpose, and yes, what you've described sounds like it would be a good deployment. Regards, tasonibare
... View more
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
