Palo Alto Lesson: 10.10 Lab Site-to-Site VPN

After you complete this lesson, you should be able to:
Describe the three basic requirements for creating a VPN
Configure the interface, IP addresses, and PSK for the IKE Gateway
Configure the DH group, encryption methods, and authentication methods for an IKE Cryptographic Profile
Configure a static route in the route table for the tunnel
Troubleshoot your IPsec VPN issues from the responder side of the VPN tunnel

[@Greg-xg7hk]

Great video, easy to follow and understand all steps. THANK you!

[@AlexandraPacker]

OK, that was really interesting. Thank you. You've got me hooked!

[@AstritKrasniqi]

Thank you Alexandra,

[@veerabsc]

Thank you for the video, very nicely explained

[@ekremaliu7442]

Great work Shqipe!!!

[@AstritKrasniqi]

faleminderit

[@Austin-sw4vo]

Thank you for this video❤

[@valerydolce]

Great content. Is it possible to reproduce this lab on EVE-NG? Do you have a step-by-step tutorial on how to implement it?

[@lolobacco]

amazing video: thanks

[@RikkaHarayuki]

What if there's a router between them?

[@aquadir2830]

Thank you very much.. it clear

[@aquadir2830]

Waiting for more videos..🙏🙏🙏

[@KentWirianata-yp5dv]

what of there's a router between them?

[@mshahidrafique76]

Nicely explained

[@AstritKrasniqi]

Thanks for liking

[@imichelena1982]

Great video!! thanks!

[@sa7038]

Your a great instructor, so clear and well laid out. Just a question but is this particular subject covered in the PCNSA?

[@AstritKrasniqi]

Thank you for your great comment, yes, the PCNSA exam covers this subject.

[@sa7038]

@@AstritKrasniqi Strange that the new PCNSA study guide makes no mention of this, perhaps it is now not included since the new revision last year.

[@digitalthala]

Hi, got one question what if there are multiple subnet advertised on both side. We need to do any special configuration or use ikev2 or anything?

[@mattgothers2358]

so does the FW need a route to point traffic for the far side to the tunnel interface or will it automatically inject that to routing based on the remote side proxy id ?

[@GNIrfan]

we no need to add static route and security policy for this? Because in some videos they are adding these two which making me confuse..

[@BlacK_X_MantrA]

did you make your lab in gns3 or eve-ng to connect all the vm?

[@smrutiranjannaik9293]

Very nice video...

[@AstritKrasniqi]

Thank you! Cheers!

[@jacksenesapable]

Is there a video on how to nat the local ips to hide them?

[@bloodaction2]

Hello Astrit. Can you just advise on where do we get those Tunnel IP addresses. I see they are private so maybe we choose them by ourselves? Thanks in advance.

[@AstritKrasniqi]

Private addresses chosen from a random private range

[@mohamedrabahi1233]

Thanks

[@AstritKrasniqi]

No problem

[@mrbptvmovies5470]

Nice

[@NickSmith-hv9zi]

Worst explanation and clearly incomplete. You should then specify (no traffic across tunnel in your label so we don't waist our time) as clearly you didn't define any interesting traffic or you didn't do anything to pass any traffic across the tunnels.

[@AstritKrasniqi]

This explanation covers all topics in depth for the PCNSA exam, and I adhere to the Palo Alto curriculum. If you're viewing these videos to learn how to set up a Site to Site VPN for work, you should probably employ a professional rather than trying to learn it on KZbin. So, if you want to observe how traffic moves from one site to another, take a look at the PCNSE course.