{"id":3513,"date":"2022-04-29T22:36:39","date_gmt":"2022-04-30T06:36:39","guid":{"rendered":"https:\/\/tungle.ca\/?p=3513"},"modified":"2022-04-30T18:25:16","modified_gmt":"2022-05-01T02:25:16","slug":"deploy-an-ipsec-vpn-site-to-site-between-palo-alto-on-prem-and-virtual-private-gateway-on-gcp-2","status":"publish","type":"post","link":"https:\/\/tungle.ca\/?p=3513","title":{"rendered":"Deploy an IPSEC VPN site-to-site between Palo Alto on-prem and Virtual Private Gateway on GCP"},"content":{"rendered":"\n<p>This is a diagram that I have used for the lab.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"778\" height=\"433\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-879.png\" alt=\"\" class=\"wp-image-3514\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-879.png 778w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-879-300x167.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-879-768x427.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-879-200x111.png 200w\" sizes=\"auto, (max-width: 778px) 100vw, 778px\" \/><\/figure>\n\n\n\n<p>Create a new VPC network on GCP.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"686\" height=\"508\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-828.png\" alt=\"\" class=\"wp-image-3461\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-828.png 686w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-828-300x222.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-828-200x148.png 200w\" sizes=\"auto, (max-width: 686px) 100vw, 686px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"717\" height=\"703\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-829.png\" alt=\"\" class=\"wp-image-3462\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-829.png 717w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-829-300x294.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-829-200x196.png 200w\" sizes=\"auto, (max-width: 717px) 100vw, 717px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"838\" height=\"770\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-831.png\" alt=\"\" class=\"wp-image-3464\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-831.png 838w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-831-300x276.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-831-768x706.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-831-200x184.png 200w\" sizes=\"auto, (max-width: 838px) 100vw, 838px\" \/><\/figure>\n\n\n\n<p>Search VPN keyword on the search function.<\/p>\n\n\n\n<p>Click \u201cCreate VPN connection\u201d.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"338\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-833-1024x338.png\" alt=\"\" class=\"wp-image-3466\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-833-1024x338.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-833-300x99.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-833-768x254.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-833-200x66.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-833.png 1074w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Select Classic VPN.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"790\" height=\"795\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-834.png\" alt=\"\" class=\"wp-image-3467\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-834.png 790w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-834-298x300.png 298w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-834-150x150.png 150w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-834-768x773.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-834-200x200.png 200w\" sizes=\"auto, (max-width: 790px) 100vw, 790px\" \/><\/figure>\n\n\n\n<p>Select tung-vpc on the network setting.<\/p>\n\n\n\n<p>Create a new static IP address for your VPC.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"994\" height=\"651\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-837.png\" alt=\"\" class=\"wp-image-3470\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-837.png 994w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-837-300x196.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-837-768x503.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-837-200x131.png 200w\" sizes=\"auto, (max-width: 994px) 100vw, 994px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"793\" height=\"738\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-838.png\" alt=\"\" class=\"wp-image-3471\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-838.png 793w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-838-300x279.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-838-768x715.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-838-200x186.png 200w\" sizes=\"auto, (max-width: 793px) 100vw, 793px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"793\" height=\"873\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-839.png\" alt=\"\" class=\"wp-image-3472\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-839.png 793w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-839-273x300.png 273w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-839-768x845.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-839-182x200.png 182w\" sizes=\"auto, (max-width: 793px) 100vw, 793px\" \/><\/figure>\n\n\n\n<p>Delete tunnel 2 because I have only used tunnel 1 in this lab. Then click Create.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"649\" height=\"240\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-841.png\" alt=\"\" class=\"wp-image-3474\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-841.png 649w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-841-300x111.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-841-200x74.png 200w\" sizes=\"auto, (max-width: 649px) 100vw, 649px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"401\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-842-1024x401.png\" alt=\"\" class=\"wp-image-3475\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-842-1024x401.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-842-300x117.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-842-768x301.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-842-200x78.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-842.png 1093w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"782\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-843-1024x782.png\" alt=\"\" class=\"wp-image-3476\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-843-1024x782.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-843-300x229.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-843-768x587.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-843-200x153.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-843.png 1030w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Click gpc-pa-tunnel-1.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"871\" height=\"753\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-844.png\" alt=\"\" class=\"wp-image-3477\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-844.png 871w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-844-300x259.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-844-768x664.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-844-200x173.png 200w\" sizes=\"auto, (max-width: 871px) 100vw, 871px\" \/><\/figure>\n\n\n\n<p>Edit the Routes to allow traffic from my tung-vpc network to the Internet via the Default Internet gateway.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"767\" height=\"678\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-846.png\" alt=\"\" class=\"wp-image-3479\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-846.png 767w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-846-300x265.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-846-200x177.png 200w\" sizes=\"auto, (max-width: 767px) 100vw, 767px\" \/><\/figure>\n\n\n\n<p>We can see the static route from privatesubnet on GCP to the LAN subnets on Palo Alto has been created on the Routes section.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"679\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-878-1024x679.png\" alt=\"\" class=\"wp-image-3511\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-878-1024x679.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-878-300x199.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-878-768x509.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-878-200x133.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-878.png 1297w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Check the Firewall and allow SSH from the Internet to Linux instance on the \u201cprivatesubnet\u201d.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"749\" height=\"712\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-847.png\" alt=\"\" class=\"wp-image-3480\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-847.png 749w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-847-300x285.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-847-200x190.png 200w\" sizes=\"auto, (max-width: 749px) 100vw, 749px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"808\" height=\"887\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-848.png\" alt=\"\" class=\"wp-image-3481\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-848.png 808w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-848-273x300.png 273w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-848-768x843.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-848-182x200.png 182w\" sizes=\"auto, (max-width: 808px) 100vw, 808px\" \/><\/figure>\n\n\n\n<p>I have used \u201cAllow all\u201d to allow SSH from the Internet to Linux instance, We are able to change to only allow SSH protocol or port 22. Click Create.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"567\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-876-1024x567.png\" alt=\"\" class=\"wp-image-3509\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-876-1024x567.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-876-300x166.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-876-768x425.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-876-200x111.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-876.png 1143w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Search \u201ccompute engine\u201d, and click create an instance.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"912\" height=\"730\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-852.png\" alt=\"\" class=\"wp-image-3485\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-852.png 912w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-852-300x240.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-852-768x615.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-852-200x160.png 200w\" sizes=\"auto, (max-width: 912px) 100vw, 912px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"899\" height=\"428\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-855.png\" alt=\"\" class=\"wp-image-3488\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-855.png 899w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-855-300x143.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-855-768x366.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-855-200x95.png 200w\" sizes=\"auto, (max-width: 899px) 100vw, 899px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"952\" height=\"554\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-854.png\" alt=\"\" class=\"wp-image-3487\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-854.png 952w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-854-300x175.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-854-768x447.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-854-200x116.png 200w\" sizes=\"auto, (max-width: 952px) 100vw, 952px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"853\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-856.png\" alt=\"\" class=\"wp-image-3489\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-856.png 900w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-856-300x284.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-856-768x728.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-856-200x190.png 200w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"922\" height=\"418\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-857.png\" alt=\"\" class=\"wp-image-3490\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-857.png 922w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-857-300x136.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-857-768x348.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-857-200x91.png 200w\" sizes=\"auto, (max-width: 922px) 100vw, 922px\" \/><\/figure>\n\n\n\n<p>On network interfaces.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"944\" height=\"817\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-853.png\" alt=\"\" class=\"wp-image-3486\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-853.png 944w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-853-300x260.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-853-768x665.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-853-200x173.png 200w\" sizes=\"auto, (max-width: 944px) 100vw, 944px\" \/><\/figure>\n\n\n\n<p>Click create.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"899\" height=\"892\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-858.png\" alt=\"\" class=\"wp-image-3491\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-858.png 899w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-858-300x298.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-858-150x150.png 150w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-858-768x762.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-858-200x198.png 200w\" sizes=\"auto, (max-width: 899px) 100vw, 899px\" \/><\/figure>\n\n\n\n<p>Open SSH in browser windows on the Linux instance.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"446\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-869-1024x446.png\" alt=\"\" class=\"wp-image-3502\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-869-1024x446.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-869-300x131.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-869-768x335.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-869-200x87.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-869.png 1328w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"851\" height=\"453\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-870.png\" alt=\"\" class=\"wp-image-3503\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-870.png 851w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-870-300x160.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-870-768x409.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-870-200x106.png 200w\" sizes=\"auto, (max-width: 851px) 100vw, 851px\" \/><\/figure>\n\n\n\n<p>Go to FortiGate.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"760\" height=\"540\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-880.png\" alt=\"\" class=\"wp-image-3515\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-880.png 760w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-880-300x213.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-880-200x142.png 200w\" sizes=\"auto, (max-width: 760px) 100vw, 760px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"922\" height=\"530\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-881.png\" alt=\"\" class=\"wp-image-3516\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-881.png 922w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-881-300x172.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-881-768x441.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-881-200x115.png 200w\" sizes=\"auto, (max-width: 922px) 100vw, 922px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"775\" height=\"429\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-882.png\" alt=\"\" class=\"wp-image-3517\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-882.png 775w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-882-300x166.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-882-768x425.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-882-200x111.png 200w\" sizes=\"auto, (max-width: 775px) 100vw, 775px\" \/><\/figure>\n\n\n\n<p>Create IP tunnel.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"775\" height=\"442\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-883.png\" alt=\"\" class=\"wp-image-3518\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-883.png 775w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-883-300x171.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-883-768x438.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-883-200x114.png 200w\" sizes=\"auto, (max-width: 775px) 100vw, 775px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"596\" height=\"525\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-884.png\" alt=\"\" class=\"wp-image-3519\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-884.png 596w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-884-300x264.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-884-200x176.png 200w\" sizes=\"auto, (max-width: 596px) 100vw, 596px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"596\" height=\"630\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-885.png\" alt=\"\" class=\"wp-image-3520\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-885.png 596w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-885-284x300.png 284w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-885-189x200.png 189w\" sizes=\"auto, (max-width: 596px) 100vw, 596px\" \/><\/figure>\n\n\n\n<p>Phase 1.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"596\" height=\"459\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-886.png\" alt=\"\" class=\"wp-image-3521\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-886.png 596w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-886-300x231.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-886-200x154.png 200w\" sizes=\"auto, (max-width: 596px) 100vw, 596px\" \/><\/figure>\n\n\n\n<p>Phase 2.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"579\" height=\"678\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-888.png\" alt=\"\" class=\"wp-image-3523\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-888.png 579w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-888-256x300.png 256w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-888-171x200.png 171w\" sizes=\"auto, (max-width: 579px) 100vw, 579px\" \/><\/figure>\n\n\n\n<p>Create a static route to allow traffic from FortiGate LAN subnet to GCP privatesubnet.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"685\" height=\"419\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-889.png\" alt=\"\" class=\"wp-image-3524\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-889.png 685w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-889-300x184.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-889-200x122.png 200w\" sizes=\"auto, (max-width: 685px) 100vw, 685px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"788\" height=\"400\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-890.png\" alt=\"\" class=\"wp-image-3525\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-890.png 788w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-890-300x152.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-890-768x390.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-890-200x102.png 200w\" sizes=\"auto, (max-width: 788px) 100vw, 788px\" \/><\/figure>\n\n\n\n<p>Create both FG-LAN and GCP-LAN subnet.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"403\" height=\"342\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-893.png\" alt=\"\" class=\"wp-image-3528\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-893.png 403w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-893-300x255.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-893-200x170.png 200w\" sizes=\"auto, (max-width: 403px) 100vw, 403px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"461\" height=\"344\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-892.png\" alt=\"\" class=\"wp-image-3527\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-892.png 461w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-892-300x224.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-892-200x149.png 200w\" sizes=\"auto, (max-width: 461px) 100vw, 461px\" \/><\/figure>\n\n\n\n<p>Create both access rules to allow traffic from the FortiGate LAN subnet to the GCP private subnet and vice versa.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"773\" height=\"673\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-894.png\" alt=\"\" class=\"wp-image-3529\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-894.png 773w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-894-300x261.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-894-768x669.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-894-200x174.png 200w\" sizes=\"auto, (max-width: 773px) 100vw, 773px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"659\" height=\"680\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-895.png\" alt=\"\" class=\"wp-image-3530\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-895.png 659w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-895-291x300.png 291w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-895-194x200.png 194w\" sizes=\"auto, (max-width: 659px) 100vw, 659px\" \/><\/figure>\n\n\n\n<p>Ping from Kali machine to the Linux instance on GCP.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"791\" height=\"581\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-896.png\" alt=\"\" class=\"wp-image-3531\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-896.png 791w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-896-300x220.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-896-768x564.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-896-200x147.png 200w\" sizes=\"auto, (max-width: 791px) 100vw, 791px\" \/><\/figure>\n\n\n\n<p>The tunnel is up on FortiGate.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"927\" height=\"409\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-897.png\" alt=\"\" class=\"wp-image-3532\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-897.png 927w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-897-300x132.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-897-768x339.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-897-200x88.png 200w\" sizes=\"auto, (max-width: 927px) 100vw, 927px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"936\" height=\"516\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-898.png\" alt=\"\" class=\"wp-image-3533\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-898.png 936w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-898-300x165.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-898-768x423.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-898-200x110.png 200w\" sizes=\"auto, (max-width: 936px) 100vw, 936px\" \/><\/figure>\n\n\n\n<p>Ping from Linux instance on GCP to Kali machine on FortiGate LAN subnet.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"591\" height=\"273\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-899.png\" alt=\"\" class=\"wp-image-3534\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-899.png 591w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-899-300x139.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-899-200x92.png 200w\" sizes=\"auto, (max-width: 591px) 100vw, 591px\" \/><\/figure>\n\n\n\n<p>The tunnel is up on GCP as well.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"301\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-901-1024x301.png\" alt=\"\" class=\"wp-image-3536\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-901-1024x301.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-901-300x88.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-901-768x226.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-901-200x59.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-901.png 1385w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>This is a diagram that I have used for the lab. Create a new VPC network on GCP. Search VPN keyword on the search function. Click \u201cCreate VPN connection\u201d. Select Classic VPN. Select tung-vpc on the network setting. Create a new static IP address for your VPC. Delete tunnel 2 because I have only used [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19,3],"tags":[20,27],"class_list":["post-3513","post","type-post","status-publish","format-standard","hentry","category-cloud","category-fortigate","tag-cloud","tag-fortigate"],"_links":{"self":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts\/3513","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3513"}],"version-history":[{"count":1,"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts\/3513\/revisions"}],"predecessor-version":[{"id":3537,"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts\/3513\/revisions\/3537"}],"wp:attachment":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3513"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3513"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3513"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}