0

Is there a way to use a cisco 2800 router to create a point-point tunnel to a Palo alto 3020 firewall with support for 6 vlan's on the cisco side. I want to create a tunnel from a new office to my HQ and I need to support VLAN's for management, phones, pc's, access points, printers, and servers all on different vlan's and subnets.

  • 1
    You really do not want layer-2 VLANs across the tunnel. That leads to all sorts of problems, and you propagate layer-2 problems between sites. Simply route between the sites through the tunnel, which then looks like a physical link between the routers. – Ron Maupin Oct 17 '19 at 18:51
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can provide and accept your own answer. – Ron Maupin Dec 15 '19 at 19:41
1

Is there a way to use a cisco 2800 router to create a point-point tunnel to a Palo alto 3020 firewall

Yes, IPsec is generally supported. You'll need to find a common parameter set though.

with support for 6 vlan's on the cisco side.

Simply route into and out of the tunnel and use firewall rules to permit what you need and deny what you don't, e.g. 'permit VOIP-A to VOIP-B'.

On each router's LAN side you create/use VLANs to separate traffic on the L2 infrastructure. You neither need nor want VLANs on the VPN link.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.