{"id":3846,"date":"2022-05-12T22:05:25","date_gmt":"2022-05-13T06:05:25","guid":{"rendered":"https:\/\/tungle.ca\/?p=3846"},"modified":"2023-01-05T18:50:09","modified_gmt":"2023-01-06T02:50:09","slug":"implementing-vpn-site-to-site-between-palo-alto-on-prem-and-palo-alto-on-the-google-cloud-platform","status":"publish","type":"post","link":"https:\/\/tungle.ca\/?p=3846","title":{"rendered":"Implementing VPN site-to-site between Palo Alto on-prem and Palo Alto on the Google Cloud Platform"},"content":{"rendered":"\n<p>This is a diagram that I have used for this lab.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"803\" height=\"443\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-136.png\" alt=\"\" class=\"wp-image-3847\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-136.png 803w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-136-300x166.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-136-768x424.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-136-200x110.png 200w\" sizes=\"auto, (max-width: 803px) 100vw, 803px\" \/><\/figure>\n\n\n\n<p>I have set up the first part for Palo Alto on GCP (<a href=\"https:\/\/tungle.ca\/?p=3760\">https:\/\/tungle.ca\/?p=3760<\/a>). Now, I go to set up the VPN site-to-site between Palo Alto on-prem and Palo Alto on GCP.<\/p>\n\n\n\n<p>On Palo Alto on-prem.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"948\" height=\"484\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-137.png\" alt=\"\" class=\"wp-image-3849\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-137.png 948w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-137-300x153.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-137-768x392.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-137-200x102.png 200w\" sizes=\"auto, (max-width: 948px) 100vw, 948px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"698\" height=\"183\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-138.png\" alt=\"\" class=\"wp-image-3850\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-138.png 698w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-138-300x79.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-138-200x52.png 200w\" sizes=\"auto, (max-width: 698px) 100vw, 698px\" \/><\/figure>\n\n\n\n<p>Setup DHCP service on the e1\/2 interface.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"919\" height=\"344\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-139.png\" alt=\"\" class=\"wp-image-3851\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-139.png 919w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-139-300x112.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-139-768x287.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-139-200x75.png 200w\" sizes=\"auto, (max-width: 919px) 100vw, 919px\" \/><\/figure>\n\n\n\n<p>Set the default route on Palo Alto.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"762\" height=\"653\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-140.png\" alt=\"\" class=\"wp-image-3852\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-140.png 762w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-140-300x257.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-140-200x171.png 200w\" sizes=\"auto, (max-width: 762px) 100vw, 762px\" \/><\/figure>\n\n\n\n<p>Create a tunnel 1 on Palo Alto.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"537\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-141.png\" alt=\"\" class=\"wp-image-3853\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-141.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-141-300x210.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-141-200x140.png 200w\" sizes=\"auto, (max-width: 768px) 100vw, 768px\" \/><\/figure>\n\n\n\n<p>Create an IKECrypto.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"863\" height=\"584\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-142.png\" alt=\"\" class=\"wp-image-3854\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-142.png 863w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-142-300x203.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-142-768x520.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-142-200x135.png 200w\" sizes=\"auto, (max-width: 863px) 100vw, 863px\" \/><\/figure>\n\n\n\n<p>Create an IPSECCrypto.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"859\" height=\"586\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-143.png\" alt=\"\" class=\"wp-image-3855\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-143.png 859w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-143-300x205.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-143-768x524.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-143-200x136.png 200w\" sizes=\"auto, (max-width: 859px) 100vw, 859px\" \/><\/figure>\n\n\n\n<p>Create an IKEGateway.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"786\" height=\"609\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-144.png\" alt=\"\" class=\"wp-image-3856\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-144.png 786w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-144-300x232.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-144-768x595.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-144-200x155.png 200w\" sizes=\"auto, (max-width: 786px) 100vw, 786px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"777\" height=\"530\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-145.png\" alt=\"\" class=\"wp-image-3857\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-145.png 777w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-145-300x205.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-145-768x524.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-145-200x136.png 200w\" sizes=\"auto, (max-width: 777px) 100vw, 777px\" \/><\/figure>\n\n\n\n<p>Create an IPSECTunnel.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"858\" height=\"488\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-146.png\" alt=\"\" class=\"wp-image-3858\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-146.png 858w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-146-300x171.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-146-768x437.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-146-200x114.png 200w\" sizes=\"auto, (max-width: 858px) 100vw, 858px\" \/><\/figure>\n\n\n\n<p>Create network objects for LAN subnets of Palo Alto on-prem and on GCP.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"793\" height=\"371\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-147.png\" alt=\"\" class=\"wp-image-3859\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-147.png 793w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-147-300x140.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-147-768x359.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-147-200x94.png 200w\" sizes=\"auto, (max-width: 793px) 100vw, 793px\" \/><\/figure>\n\n\n\n<p>Create both security policies to allow traffic from LAN subnets on Palo Alto &#8211; GCP to LAN subnets on Palo Alto on-prem and vice versa.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"954\" height=\"330\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-148.png\" alt=\"\" class=\"wp-image-3860\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-148.png 954w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-148-300x104.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-148-768x266.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-148-200x69.png 200w\" sizes=\"auto, (max-width: 954px) 100vw, 954px\" \/><\/figure>\n\n\n\n<p>Create a static route to allow traffic from LAN subnets of Palo Alto on-prem to LAN subnets of Palo Alto on the cloud.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"744\" height=\"474\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-149.png\" alt=\"\" class=\"wp-image-3861\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-149.png 744w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-149-300x191.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-149-200x127.png 200w\" sizes=\"auto, (max-width: 744px) 100vw, 744px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"809\" height=\"407\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-150.png\" alt=\"\" class=\"wp-image-3862\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-150.png 809w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-150-300x151.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-150-768x386.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-150-200x101.png 200w\" sizes=\"auto, (max-width: 809px) 100vw, 809px\" \/><\/figure>\n\n\n\n<p>Create SNAT to allow the local network to access the Internet.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"938\" height=\"330\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-151.png\" alt=\"\" class=\"wp-image-3863\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-151.png 938w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-151-300x106.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-151-768x270.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-151-200x70.png 200w\" sizes=\"auto, (max-width: 938px) 100vw, 938px\" \/><\/figure>\n\n\n\n<p>Create another access rule to allow traffic from the LAN network to access the Internet.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"947\" height=\"346\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-152.png\" alt=\"\" class=\"wp-image-3864\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-152.png 947w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-152-300x110.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-152-768x281.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-152-200x73.png 200w\" sizes=\"auto, (max-width: 947px) 100vw, 947px\" \/><\/figure>\n\n\n\n<p>The Kali machine on the LAN network is able to access the Internet.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"761\" height=\"510\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-153.png\" alt=\"\" class=\"wp-image-3865\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-153.png 761w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-153-300x201.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-153-200x134.png 200w\" sizes=\"auto, (max-width: 761px) 100vw, 761px\" \/><\/figure>\n\n\n\n<p>Back to Palo Alto on GCP.<\/p>\n\n\n\n<p>Create a tunnel 1 on Palo Alto.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"611\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-154-1024x611.png\" alt=\"\" class=\"wp-image-3866\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-154-1024x611.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-154-300x179.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-154-768x459.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-154-200x119.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-154.png 1107w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Create an IKECrypto.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"611\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-155-1024x611.png\" alt=\"\" class=\"wp-image-3867\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-155-1024x611.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-155-300x179.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-155-768x458.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-155-200x119.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-155.png 1152w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Create an IPSECCrypto.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"636\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-156-1024x636.png\" alt=\"\" class=\"wp-image-3868\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-156-1024x636.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-156-300x186.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-156-768x477.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-156-200x124.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-156.png 1146w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Create an IKEGateway.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"729\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-157-1024x729.png\" alt=\"\" class=\"wp-image-3869\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-157-1024x729.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-157-300x214.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-157-768x547.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-157-200x142.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-157.png 1050w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"625\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-158-1024x625.png\" alt=\"\" class=\"wp-image-3870\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-158-1024x625.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-158-300x183.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-158-768x469.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-158-200x122.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-158.png 1053w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Create an IPSEC tunnel.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"537\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-159-1024x537.png\" alt=\"\" class=\"wp-image-3871\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-159-1024x537.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-159-300x157.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-159-768x402.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-159-200x105.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-159.png 1147w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Create network objects for LAN subnets for Palo Alto on-prem and on the cloud.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"349\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-167-1024x349.png\" alt=\"\" class=\"wp-image-3879\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-167-1024x349.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-167-300x102.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-167-768x261.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-167-200x68.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-167.png 1178w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Create both security policies to allow traffic from LAN subnets on Palo Alto on GCP to LAN subnets on Palo Alto on-prem and vice versa.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"210\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-161-1024x210.png\" alt=\"\" class=\"wp-image-3873\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-161-1024x210.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-161-300x61.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-161-768x157.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-161-200x41.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-161.png 1147w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Create a static route to allow traffic from LAN subnets of Palo Alto on the cloud to LAN subnets of Palo Alto on-prem.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"664\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-162-1024x664.png\" alt=\"\" class=\"wp-image-3874\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-162-1024x664.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-162-300x194.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-162-768x498.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-162-200x130.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-162.png 1140w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"763\" height=\"474\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-163.png\" alt=\"\" class=\"wp-image-3875\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-163.png 763w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-163-300x186.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-163-200x124.png 200w\" sizes=\"auto, (max-width: 763px) 100vw, 763px\" \/><\/figure>\n\n\n\n<p>Go to the vpc-inside network, and create &#8220;Add route&#8221; to add a new route to LAN subnets of Palo Alto on-prem.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"671\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-164-1024x671.png\" alt=\"\" class=\"wp-image-3876\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-164-1024x671.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-164-300x197.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-164-768x504.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-164-200x131.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-164.png 1307w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"940\" height=\"738\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-165.png\" alt=\"\" class=\"wp-image-3877\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-165.png 940w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-165-300x236.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-165-768x603.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-165-200x157.png 200w\" sizes=\"auto, (max-width: 940px) 100vw, 940px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"685\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-166-1024x685.png\" alt=\"\" class=\"wp-image-3878\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-166-1024x685.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-166-300x201.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-166-768x514.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-166-200x134.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-166.png 1303w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Ping Kali&#8217;s machine from Windows 2016 VM on GCP.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"909\" height=\"762\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-176.png\" alt=\"\" class=\"wp-image-3888\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-176.png 909w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-176-300x251.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-176-768x644.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-176-200x168.png 200w\" sizes=\"auto, (max-width: 909px) 100vw, 909px\" \/><\/figure>\n\n\n\n<p>Ping the Windows 2016 VM on Kali&#8217;s machine.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"532\" height=\"256\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-169.png\" alt=\"\" class=\"wp-image-3881\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-169.png 532w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-169-300x144.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-169-200x96.png 200w\" sizes=\"auto, (max-width: 532px) 100vw, 532px\" \/><\/figure>\n\n\n\n<p>The IPSEC tunnel is up on Palo Alto on-prem.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"925\" height=\"313\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-170.png\" alt=\"\" class=\"wp-image-3882\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-170.png 925w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-170-300x102.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-170-768x260.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-170-200x68.png 200w\" sizes=\"auto, (max-width: 925px) 100vw, 925px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"836\" height=\"385\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-171.png\" alt=\"\" class=\"wp-image-3883\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-171.png 836w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-171-300x138.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-171-768x354.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-171-200x92.png 200w\" sizes=\"auto, (max-width: 836px) 100vw, 836px\" \/><\/figure>\n\n\n\n<p>The IPSEC tunnel is up in Palo Alto on GCP.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"315\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-172-1024x315.png\" alt=\"\" class=\"wp-image-3884\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-172-1024x315.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-172-300x92.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-172-768x236.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-172-200x62.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-172.png 1388w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"997\" height=\"518\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-173.png\" alt=\"\" class=\"wp-image-3885\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-173.png 997w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-173-300x156.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-173-768x399.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-173-200x104.png 200w\" sizes=\"auto, (max-width: 997px) 100vw, 997px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"593\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-174-1024x593.png\" alt=\"\" class=\"wp-image-3886\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-174-1024x593.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-174-300x174.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-174-768x445.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-174-200x116.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-174.png 1494w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"559\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-175-1024x559.png\" alt=\"\" class=\"wp-image-3887\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-175-1024x559.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-175-300x164.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-175-768x419.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-175-200x109.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-175.png 1485w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>This is a diagram that I have used for this lab. I have set up the first part for Palo Alto on GCP (https:\/\/tungle.ca\/?p=3760). Now, I go to set up the VPN site-to-site between Palo Alto on-prem and Palo Alto on GCP. On Palo Alto on-prem. Setup DHCP service on the e1\/2 interface. Set the [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19,21],"tags":[20,18],"class_list":["post-3846","post","type-post","status-publish","format-standard","hentry","category-cloud","category-palo-alto","tag-cloud","tag-palo-alto"],"_links":{"self":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts\/3846","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3846"}],"version-history":[{"count":3,"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts\/3846\/revisions"}],"predecessor-version":[{"id":3891,"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts\/3846\/revisions\/3891"}],"wp:attachment":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3846"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3846"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3846"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}