We help IT Professionals succeed at work.

Palo Alto Networks: Adding Many IPSec Tunnel Proxy ID's at Once

637 Views
Last Modified: 2019-04-20
I need to migrate a VPN tunnel with 70 lines of cryptomap. The PAN GUI appears to permit my only adding
a single line at one time. I see that I can add security rules via CLI. Perhaps there is something similar for
adding an IPsec tunnel and its Proxy IDs? Any other thoughts apprecaited.

set rulebase security rules Inbound-SSH from corpfw2-untrust
set rulebase security rules Inbound-SSH to corp-vpn
set rulebase security rules Inbound-SSH source RFC-1918
set rulebase security rules Inbound-SSH destination any
set rulebase security rules Inbound-SSH source-user any
set rulebase security rules Inbound-SSH category any
set rulebase security rules Inbound-SSH application [ ssh ssh-tunnel]
set rulebase security rules Inbound-SSH service application-default
set rulebase security rules Inbound-SSH hip-profiles any
set rulebase security rules Inbound-SSH action allow
set rulebase security rules Inbound-SSH profile-setting group Corp-Default-SecPro1
set rulebase security rules Inbound-SSH log-start yes
set rulebase security rules Inbound-SSH log-setting logmaster1
set rulebase security rules Inbound-SSH disabled yes
Comment
Watch Question

Gerente Seguridad Tecnologica
CERTIFIED EXPERT
Commented:
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION
amigan_99Network Engineer

Author

Commented:
Nice sign-off "Regrets, "

:-)
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.