vpn concentrator ip assignment

newengineerhere
Here to help

vpn concentrator ip assignment

Hi, I have a question about the IP assignment for a vpn concentrator. I have two palo altos that I use as primary firewalls and am planning on having two mx appliances behind them as vpn concentrators. My questions below;

 

Do I assign a private RFC 1918 addressing for the WAN interfaces of the MXs? If so, do I need three public static IPs for my palo altos to perform NAT (one for each MX plus a Virtual IP)?

 

 

Any help will be appreciated!

1 Reply 1
ww
Kind of a big deal
Kind of a big deal

RFC 1918 is fine.  You dont need 1:1 NAT at PA.  

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels