Palo Alto Lesson: 10.10 Lab Site-to-Site VPN

After you complete this lesson, you should be able to:
Describe the three basic requirements for creating a VPN
Configure the interface, IP addresses, and PSK for the IKE Gateway
Configure the DH group, encryption methods, and authentication methods for an IKE Cryptographic Profile
Configure a static route in the route table for the tunnel
Troubleshoot your IPsec VPN issues from the responder side of the VPN tunnel

[@ControlledDemolition]

Thank you. IKE rhymes with LIKE.

[@Greg-xg7hk]

Great video, easy to follow and understand all steps. THANK you!

[@valerydolce]

Great content.
Is it possible to reproduce this lab on EVE-NG? Do you have a step-by-step tutorial on how to implement it?

[@AlexandraPacker]

OK, that was really interesting. Thank you. You've got me hooked!

[@AstritKrasniqi]

Thank you Alexandra,

[@sa7038]

Your a great instructor, so clear and well laid out. Just a question but is this particular subject covered in the PCNSA?

[@AstritKrasniqi]

Thank you for your great comment, yes, the PCNSA exam covers this subject.

[@sa7038]

@@AstritKrasniqi Strange that the new PCNSA study guide makes no mention of this, perhaps it is now not included since the new revision last year.

[@veerabsc]

Thank you for the video, very nicely explained

[@Austin-sw4vo]

Thank you for this video❤

[@ekremaliu7442]

Great work Shqipe!!!

[@AstritKrasniqi]

faleminderit

[@aquadir2830]

Waiting for more videos..🙏🙏🙏

[@lolobacco]

amazing video: thanks

[@aquadir2830]

Thank you very much.. it clear

[@GNIrfan]

we no need to add static route and security policy for this? Because in some videos they are adding these two which making me confuse..

[@BlacK_X_MantrA]

did you make your lab in gns3 or eve-ng to connect all the vm?

[@jacksenesapable]

Is there a video on how to nat the local ips to hide them?

[@mrbptvmovies5470]

Nice

[@KentWirianata-yp5dv]

what of there's a router between them?

[@RikkaHarayuki]

What if there's a router between them?

[@mattgothers2358]

so does the FW need a route to point traffic for the far side to the tunnel interface or will it automatically inject that to routing based on the remote side proxy id ?

[@mshahidrafique76]

Nicely explained

[@AstritKrasniqi]

Thanks for liking

[@imichelena1982]

Great video!! thanks!

[@bloodaction2]

Hello Astrit.
Can you just advise on where do we get those Tunnel IP addresses.
I see they are private so maybe we choose them by ourselves?
Thanks in advance.

[@AstritKrasniqi]

Private addresses chosen from a random private range

[@smrutiranjannaik9293]

Very nice video...

[@AstritKrasniqi]

Thank you! Cheers!

[@mohamedrabahi1233]

Thanks

[@AstritKrasniqi]

No problem

[@NickSmith-hv9zi]

Worst explanation and clearly incomplete. You should then specify (no traffic across tunnel in your label so we don't waist our time) as clearly you didn't define any interesting traffic or you didn't do anything to pass any traffic across the tunnels.

[@AstritKrasniqi]

This explanation covers all topics in depth for the PCNSA exam, and I adhere to the Palo Alto curriculum. If you're viewing these videos to learn how to set up a Site to Site VPN for work, you should probably employ a professional rather than trying to learn it on TH-cam.
So, if you want to observe how traffic moves from one site to another, take a look at the PCNSE course.