> For the complete documentation index, see [llms.txt](https://docs.monogoto.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.monogoto.io/advanced-console/platform/vpn-setup-examples/vpn-setup-with-palo-alto-networks-interface.md).

# VPN Setup with Palo-Alto Networks Interface

1\.      Login to the Monogoto portal and go to ***Network.***

2\.      Edit your **“vpneu.mono”** network (EU zone) or **"vpnus.mono"** network (US zone).

![](/files/sDYJBboiyNtAcgd2NDsD)

3\.      Go to **Address Pools** and copy IP Address/Mask.

![](/files/k5f8WYZhHYJFeFtAIIB6)

4\.      Go to **Routes** and copy Gateway IP.

![](/files/jKgDfRzfinCup6QEcN3k)

5\.      Now we need to add a Route to the VPN in Monogoto portal -> ***Network*** -> ***Routes*** section and ***Add new*** 

* Destination = VPN IP address and mask
* Gateway = select Monogoto gateway
* Save and Close -> Apply Settings

![](/files/MYLOaiDBkpCNW6kpByUz)

6\.      Lets add a VPN on Monogoto portal. Please go to ***Network*** -> ***VPN*** section and ***Add new VPN.***

* Destination IP Address =  Palo Alto Networks Tunnel Outside IP Address
* Destination Network = Palo Alto Networks VPC IPv4 CIDR
* Pool Name = Select your pool
* Save and Close -> Apply Settings

![](/files/YD0SVMDvhExw5e59Urgv)

![](/files/J2dE3Auxvgxlq10ey0lq)

7\.      Now that we have created VPN on Monogoto end, download a VPN config file that will have all of the needed information for VPN configuration on Palo Alto Networks end.

![](/files/6pcQxcJ1hMaGvO1sK6gN)

8\.      Go to Palo Alto Networks user interface.

9\.      Switch to **Network** tab, then under **Network Profiles** go to **IKE Crypto** and press on button **Add.** Please see configuration example below

![](/files/-MMujWNNIAMX9Y0WdtNe)

![](/files/-MMuCt5GyraF5Nau9XwQ)

10\.      The next step is to create IKE Gateway. In **Network** tab, under **Network Profiles** go to **IKE Gateways** and press on button **Add.**

![](/files/-MMujA5k7ZVwJH9QdNHs)

11\.      Configure IKE Gateway, you may see example settings below.

* Local IP Address = select your local IP address
* Peer Address = is taken from **Step 4**, it is a Route Gateway from Monogoto portal
* IKE Crypto Profile = select a profile we have created in **step 6**

![](/files/-MT6pf4RTJphUQ-2L7JM)

![](/files/-MMuI91UnP_wMz6n5nTH)

12\.      Next what we want to do is to create a security zone. In **Network** tab go to **Zones** and press on **Add** button. You may see configuration example below.

![](/files/-MMuX-ide3eYSecOv89D)

![](/files/-MMuXvxethKnd4V8-8sd)

13\.      In order for Palo Alto Network to respond to ping we need to create a management profile. In **Network** tab, under **Network Profiles** go to **Interface Mgmt** and press on button **Add.** You may see configuration example below.

![](/files/-MMubNRrGweRydAzXjbC)

![](/files/-MMucrTJrJpcRp-5c9hi)

14\.      Now we need to add a Tunnel. In **Network** tab go to **Interfaces**, select a sub tab **Tunnel** and press on **Add** button. You may see configuration example below.

![](/files/-MMuZQmktQyyh-PXqOko)

![](/files/-MMu_48HLJmdHh5H5_gx)

![](/files/-MMu_6Rj8pKiHIMqQbho)

15\.      Now we want to create IPSec Crypto profile. In **Network** tab go to **Network Profiles**, select **IPSec Crypto** and press on **Add** button. You may see configuration example below.

![](/files/-MMuk799CGsUr0D0_0Lk)

![](/files/-MMueJBj6sk-BhwcYRYY)

16\.      Lets now add a IPSec tunnel. In **Network** tab go to **IPSec Tunnels** and press on **Add** button. You may see configuration example below.

* Local = local IP/netmask
* Remote = Monogoto pool IP address/mask, is taken from **step 3**

![](/files/-MMueuk_l9w7NVeNBjzJ)

![](/files/-MMufcc0ImTPP0swFcV3)

![](/files/-MMuqMmir5EgZTcc_NQN)

![](/files/-MT6qDIo_xhs1W_7Kw_D)

17\.      To make NAT settings, please go to **Policies** tab and then select **NAT**. Below you can find example configurations.

![](/files/-MMvAEQbwFzbHM96fZeF)

![](/files/-MT6qY0foemul8J65_FY)

![](/files/-MMvAJPKemWBj9qZJvYd)

18\.      To make Security settings, please go to **Policies** tab and then select **Security**. Below you can find example configuration.

![](/files/-MT6r2IwiNnuyHiv8qWk)

19\.    Make Virtual Router settings. To access them please go to **Network** tab and select **Virtual Routers**. You may see a few examples below

![](/files/-MMvNb3OxGl1_-t8dZmK)

![](/files/-MMvQU_E4BUz3gt7SSkg)

20\.      Please press on **Commit** button at the Right top corner to apply our configured settings in Palo Alto Network interface.

![](/files/-MMuzjL5sbnQpNX3BadI)

21\.      Go back to Monogoto portal ***Network*** -> ***VPN.*** Check if our created VPN status is shown as Connected, if it is not, please press on **Refresh** button.

![](/files/0Dg20L1DYjfCKeaoRsJD)

22\.      When the status of the VPN is Connected, you may check connection by doing a ping. You can do this by pressing on **Ping** button.

![](/files/B7yvBQ2NhzYFcGJW2eru)

That's all, now the VPN tunnel is now connected.