>
    Strata Copilot
    IPSec Tunnel Proxy IDs Tab
    Focus
    Focus
    1. Home
    2. Next-Generation Firewall
    3. Network
    4. Network > IPSec Tunnels
    5. IPSec Tunnel Proxy IDs Tab
    Next-Generation Firewall

    IPSec Tunnel Proxy IDs Tab

    Table of Contents

    IPSec Tunnel Proxy IDs Tab

    • Network > IPSec Tunnels > Proxy IDs
    The IPSec Tunnel Proxy IDs tab is separated into two tabs: IPv4 and IPv6. The help is similar for both types; the differences between IPv4 and IPv6 are described in the Local and Remote fields in the following table.
    The IPSec Tunnel Proxy IDs tab is also used for specifying traffic selectors for IKEv2.
    Proxy IDs IPv4 and IPv6 Settings
    Description
    Proxy ID
    Click Add and enter a name to identify the proxy.
    For an IKEv2 traffic selector, this field is used as the Name.
    Local
    For IPv4: Enter an IP address or subnet in the format x.x.x.x/mask (for example, 10.1.2.0/24).
    For IPv6: Enter an IP address and prefix length in the format xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/prefix-length (or per IPv6 convention, for example, 2001:DB8:0::/48).
    IPv6 addressing does not require that all zeros be written; leading zeros can be omitted and one grouping of consecutive zeros can be replaced by two adjacent colons (::).
    For an IKEv2 traffic selector, this field is converted to Source IP Address.
    Remote
    If required by the peer:
    For IPv4, enter an IP address or subnet in the format x.x.x.x/mask (for example, 10.1.1.0/24).
    For IPv6, enter an IP address and prefix length in the format xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/prefix-length (or per IPv6 convention, for example, 2001:DB8:55::/48).
    For an IKEv2 traffic selector, this field is converted to Destination IP Address.
    Protocol
    Specify the protocol and port numbers for the local and remote ports:
    Number—Specify the protocol number (used for interoperability with third-party devices).
    • Any—Allow TCP and/or UDP traffic.
    • TCP—Specify the local and remote TCP port numbers.
    • UDP—Specify the local and remote UDP port numbers.
    Each configured proxy ID will count towards the IPSec VPN tunnel capacity of the firewall.
    This field is also used as an IKEv2 traffic selector.

    © 2025 Palo Alto Networks, Inc. All rights reserved.