How to Identify 10Gb Interface on the Palo Alto Networks Firewall

Issue

There is no straight forward CLI command available to see the status of 10Gb ports in a Palo Alto Networks firewall. The WebGUI does not show the speed or status of these ports.

Cause

Each interface on a Palo Alto Networks device has its own link and speed capabilities. The WebGUI will not show the correct selection values for 10Gb interfaces (ethernet 21,22, 23, 24). However, selecting a value that is incompatible with an interface will lead to a commit failure, as shown in the example below:

Resolution

The only way to obtain the information about 10Gb interface capability is through the following CLI command:

> show system state | match capability

owner: sgantait