Azure vWAN Paloalto VPN BGP

Published: 2025-03-28

Intro

In a recent project I worked on, we had to setup Azure vWAN VPN with Paloalto firewalls, and enable BGP peering to exchange routes. This post covers the architecture and what is required to set that up.

Strap in Nerds, this is going to be fabulous.

Architecture

The following diagram is referenced in this post.

The below table lists the IP addressing relevant to this architecture.

#DeviceInterfaceIP Address
1fw01interface 1198.51.100.10
2fw01tunnel 11<none>
3fw01tunnel 12<none>
4fw01looopback 11169.254.21.10
5vpn0public ip203.0.113.11
6vpn0custom ip169.254.21.11
7vpn1public ip203.0.113.12
8vpn1custom ip169.254.21.12

Azure Config

This section will cover the Azure configurations.

Paloalto Config

This section will cover the Paloalto configurations.

Outro

That's the post. Peace out nerds ✌️