A customer wants to set up a site-to-site VPN using tunnel interfaces? Which two formats are correct for naming tunnel interfaces? (Choose two.)

Question

Options

• Atunnel.1
• Bvpn-tunnel.1
• Ctunnel.1025
• Dvpn-tunnel.1024

• A
  87% (26)
• B
  3% (1)
• D
  10% (3)

Explanation

On platforms like Palo Alto Networks PAN-OS, tunnel interfaces follow a strict naming convention: the prefix must be tunnel (not vpn) followed by a dot and an integer within the supported range (typically 1–9999). tunnel.1 (A) is correct as the simplest valid format, and tunnel.1025 (C) is also correct since 1025 falls within the allowable numeric range.

Options B and D (vpn-tunnel.1 and vpn-tunnel.1024) are both wrong because vpn-tunnel is not a valid prefix - the system only recognizes the literal word tunnel before the dot. The number in D (1024) is actually a valid value, but the wrong prefix makes the entire name invalid.

Memory tip: Think of it as "keep it simple - just tunnel.[number]." If you see any prefix like vpn-, ipsec-, or tun-, it's a distractor. The format is always tunnel + . + a positive integer within range.

No community discussion yet for this question.