topic Re: IPSec Tunnel Architecture in General Topics

IPSec Tunnel Architecture

Mitesh — Tue, 09 Dec 2025 10:01:06 GMT

Hi,

We need your suggestion in IPSec Tunnel Architecture, attaching architectural diagram fro your reference.

In the diagram we have mentioned incoming & outgoing traffic flow. Traffice from Remote Office to DC (ingress traffic) is indicated via Green arrow & Traffic from DC to Remote Office (egress traffic) is indicated via Red arrow.

We have performed below configuration:

For Ingress Traffic:-

1. In CP-3800, created static route to reach DMZ subnet traffic pointed to Palo Alto Interface.

2. In Palo Alto, created static route to reach DMZ subnet traffic pointed to CP-9100 interface.

3. DMZ Subnet Route advertied in CP-9100 via directly connected.

Also we have allowed traffic via security rules.

For Egress Traffic:-

1. In CP-9100, created static route to reach remote office network traffic pointed to Palo Alto Interface.

2. In Palo Alto, created static route to reach remote office network traffic pointed to CP-3800 interface.

Is any further configuration is required, need your suggestion.

Re: IPSec Tunnel Architecture

emmap — Tue, 09 Dec 2025 09:28:44 GMT

Your diagram isn't loading for me, seems to be stuck in a virus scan. What's not working for you?

Re: IPSec Tunnel Architecture

Mitesh — Tue, 09 Dec 2025 09:31:26 GMT

attached once again...

Re: IPSec Tunnel Architecture

Mitesh — Tue, 09 Dec 2025 09:59:47 GMT

Re: IPSec Tunnel Architecture

emmap — Wed, 10 Dec 2025 00:43:04 GMT

Seems fine to me, are there any specific concerns you have with it?

Re: IPSec Tunnel Architecture

the_rock — Wed, 10 Dec 2025 00:55:59 GMT

Seems right.