topic Re: Cannot ping FW from CentOS connected VM in VM-Series in the Public Cloud

Cannot ping FW from CentOS connected VM

ausafali88 — Mon, 10 Jul 2017 08:15:29 GMT

Dear experts;

I have the following setup in Azure:

CentOS-1 --------(fwVNET/Trust)-----FW----------(fwVNET/Untrust)-----CentOS-Untrust

But I cannot ping FW interface even with all Mgmgt profiles and addresses configured (which are in same subnet obviously). All NSG's in Azure allow ICMP, and even SSH is not allowed.

Can anyone help?

Re: Cannot ping FW from CentOS connected VM

reaper — Mon, 10 Jul 2017 09:50:11 GMT

is ARP resolving on the firewall ? Have you verified there's no security policy blocking the pings (app ping instead of icmp or implied intrazone policy at the end). Can you doublecheck the mgmt profiles have ping checked and are assigned to the interfaces

Re: Cannot ping FW from CentOS connected VM

ausafali88 — Mon, 10 Jul 2017 09:52:41 GMT

Yes profiles have ping checked, and ARP is not resolving....which means a Layer 2 disconnet, but why?

Re: Cannot ping FW from CentOS connected VM

ausafali88 — Mon, 10 Jul 2017 11:05:41 GMT

Should i allow ARP (via Ethertype)in my custom Interface profiles attached to interfaces?

Re: Cannot ping FW from CentOS connected VM

ausafali88 — Tue, 11 Jul 2017 08:26:19 GMT

Done by Plao Alto support.

Re: Cannot ping FW from CentOS connected VM

jperry1 — Tue, 11 Jul 2017 16:29:54 GMT

What exactly does "done by palo alto support" mean?

Can you please provide a case number?

Re: Cannot ping FW from CentOS connected VM

ausafali88 — Sun, 23 Jul 2017 04:08:07 GMT

It means:

Whenever yuou deploy a VM in Azure, never configure a Static IP inside of Guest OS, it is alwys via DHCP even if Static IP in Azure is selected.
Azure has a completely different routing architecture than other Hypervisors.

cheers.