vpn concentrator ip assignment

newengineerhere
Here to help

vpn concentrator ip assignment

Hi, I have a question about the IP assignment for a vpn concentrator. I have two palo altos that I use as primary firewalls and am planning on having two mx appliances behind them as vpn concentrators. My questions below;

 

Do I assign a private RFC 1918 addressing for the WAN interfaces of the MXs? If so, do I need three public static IPs for my palo altos to perform NAT (one for each MX plus a Virtual IP)?

 

 

Any help will be appreciated!

1 Reply 1
ww
Kind of a big deal
Kind of a big deal

RFC 1918 is fine.  You dont need 1:1 NAT at PA.  

Get notified when there are additional replies to this discussion.