topic Re: in palo alto isp2 as private ip address , and gateway is not reachable in Next-Generation Firewall Discussions

in palo alto isp2 as private ip address , and gateway is not reachable

shaikh.farman — Sun, 03 Nov 2024 18:22:01 GMT

HI Team,in palo alto isp2 as private ip address dhcp , link is working fine in laptop,after connecting to firewall gate way uis not reachable,both link are in same VR , for Both isp defualt route configured, please assist me resolve the issue

Re: in palo alto isp2 as private ip address , and gateway is not reachable

Edsnow — Mon, 04 Nov 2024 04:56:40 GMT

Verify your NAT configuration. And verify the traffic logs if the traffic gets NATed.

Re: in palo alto isp2 as private ip address , and gateway is not reachable

shaikh.farman — Mon, 04 Nov 2024 08:40:36 GMT

HI @Edsnow ,

Thanks for reply, I have configured nat too , that rule is hitting however whenever i m trying to ping gateway or google dns with source , its not rechable..and default route is there as greater metric than primary isp ...in routing table its showing but not showing active...Please assist me to resolve the issue ..

Re: in palo alto isp2 as private ip address , and gateway is not reachable

OtakarKlier — Mon, 04 Nov 2024 19:08:21 GMT

Hello,

Do you have policies allowing the ping traffic? Do the logs show where its getting blocked/denied?

Regards,

Re: in palo alto isp2 as private ip address , and gateway is not reachable

Edsnow — Tue, 05 Nov 2024 02:54:15 GMT

Share the traffic logs images. Also....if the secondry ISP has private ip address.verify NAT on the next hop for this Private IP Address.

Re: in palo alto isp2 as private ip address , and gateway is not reachable

shaikh.farman — Tue, 05 Nov 2024 09:46:53 GMT

Hi , i think other side they did not configured the route toward the lan may be, this could be the issue ?

please find the attched log snap and

Re: in palo alto isp2 as private ip address , and gateway is not reachable

OtakarKlier — Tue, 05 Nov 2024 15:01:57 GMT

Hello,

Make sure that you have the routing in place like you mentioned on both sides. Also make sure the other device allows pings.

Regards,

Re: in palo alto isp2 as private ip address , and gateway is not reachable

shaikh.farman — Tue, 05 Nov 2024 15:06:54 GMT

other side device is not managed by us , that a cradle point and managed by ISP.

Re: in palo alto isp2 as private ip address , and gateway is not reachable

OtakarKlier — Tue, 05 Nov 2024 15:16:13 GMT

Hello,

I would reach out to the owner of the device to assist in troubleshooting.

Regards,