You will want a pre-shared key/passphrase that both sides will use for the initial authentication and connection to each other.

You also need to know the lifetime for the IPSec crypto profile. For Phase 2 of the connectivity, you need to know the Encryption, Authentication, and DH Group number.You also need to know the key lifetime for the IKE crypto profile. For Phase 1 of the connectivity, you need to know the DH Group, Authentication, and Encryption.At a minimum, the following items need to be known by both parties for the proper configuration of a tunnel: Having services behind each network that I wanted to talk to each other meant that getting the tunnel built between them was a quick necessity.īefore starting to set up any tunnel, a couple of items need to be decided on each end first.

For me, this became a necessity from nearly day one of having my PA-220 in my home lab, as it was right next to my Cisco ASA. In this next article of our IPSec Tunnel series, we will cover what it takes to connect a Palo Alto Networks firewall to a Cisco Adaptive Security Appliance (ASA).

Cisco 5505 asa with ipsec tunnel