Need help with DMVPN through firewall

[orlandoramos1]

Greetings,

I was hoping if someone here could help me with some configuration information on how I can pass through traffic for our DMVPN traffic through our Palo Alto P3020 firewall.

Cheers,

Orlando Ramos

[balaji.bandi]

As Long as Palo have FW rules to allow below Traffic along with Intresting IP address. 

Depending on the crypto and DMVPN headend or branch placements, the following protocols and ports are required to be allowed:

•UDP Port 500—ISAKMP as source and destination

•UDP Port 4500—NAT-T as a destination

•IP Protocol 50—ESP

•IP Protocol 51—AH (if AH is implemented)

•IP Protocol 47—GRE

•Routing protocol   << -- depends on what IGP you using