topic Re: PA-VM-01 can't ping to PA-AM-02 via External Interface. in VM-Series in the Public Cloud

PA-VM-01 can't ping to PA-AM-02 via External Interface.

Chheang — Fri, 26 Feb 2021 08:17:39 GMT

Hi all,

I am a new Palo Alto firewalls learner, I start the lab which has 2 PA-VMs direct connected (in the purpose of testing VPN site to site) but it can't ping to each other it showing destination unreachable. I had tried to configure Interface management by allowed ping on both PAs but it's still not working, please help!!

Thanks,

Re: PA-VM-01 can't ping to PA-AM-02 via External Interface.

SebRupik — Mon, 29 Mar 2021 09:51:28 GMT

Hi there,

On the CLI, the ping command defaults to being sourced via the management interface. Can you try your test again but source it from the outside interface IP:

eg for PA-VM-01:

ping source <PA-VM-01-outside_IP> host <PA-VM-02-outside_IP>

cheers,

Seb.