Can I setup a VPN from AP330 to Palo Alto or even another Aerohive AP

  • 1
  • Question
  • Updated 4 years ago
  • Answered
A customer has this basic requirement.  They want to be able to establish a VPN between one of their existing APs and a Palo Alto firewall.  There will be another ssid on this AP and clients connecting to this will be sent down the VPN to the firewall and ultimately onto this other segragated lab environment.

Is this possible with Aerohive?  Alternatively, can the VPN be setup with another AP?

I have looked at the CVG but this is not suitable since it will only be a few APs that have this new ssid.

Could this be accomplished with a GRE tunnel maybe?
Photo of wombat


  • 62 Posts
  • 3 Reply Likes

Posted 4 years ago

  • 1
Photo of Mike Kouri

Mike Kouri, Official Rep

  • 1030 Posts
  • 271 Reply Likes
Sorry, no, you cannot establish IPSec VPNs between Aerohive and Palo Alto Networks devices. I think that GRE tunnels may be the way to go, between two Aerohive APs.

Check the documentation for guests tunneled back to a DMZ. I think that would guide you on the configuration.