IPSec Tunnel Architecture

[Mitesh]

Hi,

We need your suggestion in IPSec Tunnel Architecture, attaching architectural diagram fro your reference.

In the diagram we have mentioned incoming & outgoing traffic flow. Traffice from Remote Office to DC (ingress traffic) is indicated via Green arrow & Traffic from DC to Remote Office (egress traffic) is indicated via Red arrow.

We have performed below configuration:

For Ingress Traffic:-

1. In CP-3800, created static route to reach DMZ subnet traffic pointed to Palo Alto Interface.

2. In Palo Alto, created static route to reach DMZ subnet traffic pointed to CP-9100 interface.

3. DMZ Subnet Route advertied in CP-9100 via directly connected.

Also we have allowed traffic via security rules.

For Egress Traffic:-

1. In CP-9100, created static route to reach remote office network traffic pointed to Palo Alto Interface.

2. In Palo Alto, created static route to reach remote office network traffic pointed to CP-3800 interface.

Is any further configuration is required, need your suggestion.

[emmap]

Your diagram isn't loading for me, seems to be stuck in a virus scan. What's not working for you?

[Mitesh]

attached once again...

[Mitesh]

[emmap · Accepted solution]

Seems fine to me, are there any specific concerns you have with it?

[the_rock · Accepted solution]

Seems right.