topic Unable to communicate eth1/2 interface in VM-Series in the Public Cloud

Unable to communicate eth1/2 interface

ashutoshiparkar — Tue, 23 Jun 2020 01:03:09 GMT

Hi Guys

I have come here with lot of hope , I am doing my masters project and for that purpose my topology .My goal here is to show how paloalto can block the threats with its inbuilt IDS IPS ,url filtering , block traffic etc but right now I am facing a issue setting up a network I configured ping management on the firewall also I configured the interfaces but the problem is my client is unable to ping the eth 1/2 interface can some one help me with the process and tell me where I am going wrong.

Client --- > Firewall --> Internet

Re: Unable to communicate eth1/2 interface

jmeurer — Tue, 23 Jun 2020 01:19:40 GMT

Which cloud? (Network) Security Groups or GCP firewall rules could certainly be in play.

Double check your route table on the firewall. You should have 0/0 route pointing to the ETH1/1 subnet first IP address and a route for your vnet/vpc cidr sending the traffic back in through ETH1/2 interface. If you have both interfaces set to DHCP and default settings, they both inherit a default route. You need to disable it on the ETH1/2 interface.

Do you see the traffic in Session Browser?