Hi, I have a question about the IP assignment for a vpn concentrator. I have two palo altos that I use as primary firewalls and am planning on having two mx appliances behind them as vpn concentrators. My questions below;
Do I assign a private RFC 1918 addressing for the WAN interfaces of the MXs? If so, do I need three public static IPs for my palo altos to perform NAT (one for each MX plus a Virtual IP)?