topic Ping management interface in General Topics

Ping management interface

DavidyPalo — Sat, 08 Apr 2023 02:41:48 GMT

Hi Initial configuration is like the below. why we cannot ping 192.168.8.100 ? i would like to allow the firewall to be ping and accessed via https. Maybe it need to add some command . Anyone can provide some suggestion? Thank you

admin@PA-VM> configure
admin@PA-VM# delete deviceconfig system type dhcp-client
admin@PA-VM #set deviceconfig system type static
admin@PA-VM# set deviceconfig system ip-address 192.168.8.100 netmask 255.255.255.0
admin@PA-VM# commit

Re: Ping management interface

Raido_Rattameister — Sat, 08 Apr 2023 03:13:09 GMT

what is output of

show interface management

Re: Ping management interface

TomYoung — Sat, 08 Apr 2023 15:36:53 GMT

Hi @DavidyPalo ,

The management interface allows ping and HTTPS by default. I did not see a default gateway configuration (set deviceconfig system default-gateway x.x.x.x). You will need that if you are trying to connect from a subnet other than 192.168.8.0/24.

Thanks,

Tom

Re: Ping management interface

DavidyPalo — Sat, 08 Apr 2023 18:33:52 GMT

Thanks all for your reply! its in the same subnet. also i added default gateway. but i still cannot ping 192.168.1.73 from my pc

below is screenshot

Re: Ping management interface

Raido_Rattameister — Sat, 08 Apr 2023 18:53:40 GMT

Laptop is directly connected to Palo or is there switch in between?

Can you connect directly and test then?

You can also check "arp -a" from your laptop to see if Palo's mgmt mac address resolves.

Or perform ping from Palo side "ping host 192.168.1.x" and "show arp management"

Re: Ping management interface

DavidyPalo — Sat, 08 Apr 2023 19:07:39 GMT

Palo alto is installed as vm on eve

PC and Palo alto management interface can see each other via arp, but why its interface is eth0? please see the below

Re: Ping management interface

upelister — Mon, 10 Apr 2023 05:45:47 GMT

Hello,

In any case did you check interface management profile from FW GUI.

Re: Ping management interface

Raido_Rattameister — Tue, 11 Apr 2023 15:00:53 GMT

Not sure about eve but in VMware nic orderis following.

vNic1 - mgmt

vNic2 - ethernet1/1

vNic3 - ethernet1/2

etc

So first virtual network adapter is used for mgmt port in Palo.

Re: Ping management interface

saj_k786 — Mon, 27 Jan 2025 14:47:02 GMT

I have the same issue, I can ping from the laptop to the MGMT IP 192.168.20.50 but not from MGMT to the laptop 192.168.20.100

configure

set deviceconfig system ip-address 192.168.20.50 netmask 255.255.255.0 default-gateway 192.168.20.254 dns-setting server primary 8.8.8.8

on the laptop-

192.168.20.100

255.255.255.0

DG- 192.168.20.50

from firewall - ping host 192.168.20.100 ( it just hangs)

from laptop - ping 192.168.20.50

!!!!!!!!!!!!!!

>show arp management - I can see the laptop IP address on the FW)

cmd laptop - 192.168.12.50) I see the MGMT IP)