topic Re: ping between vyos router and pa-vm not working in General Topics

ping between vyos router and pa-vm not working

jsburgoyne — Thu, 14 Sep 2023 17:37:16 GMT

Hey all.

I'm starting my PCSNA journey and I've been going through CBT Nuggets and have setup the CBT Nugget lab.

My 1/6 interface 23.1.2.15/24 cannot ping my vyos router ip at 23.1.2.1/24 and vice versa.

I have allowed ping via the interface management on interface 1/6 which is associated to the outside zone.

I have a policy allowing traffic from the inside to the outside with no restriction as well as from the outside to the inside.

Both interfaces for the router and the pa-vm are in the same vwnet.

My default route for my pa-vm points to 23.1.2.1

I have tested the vyos router with a windows 10 vm and I'm able to ping from each device within the 23.1.2.x network.

I'm not sure what else to look at in order to get the pings to work on the 23.1.2.0/24 network and eventually my network traffic.

I'm missing something to allow communication between the vyos router and the pa-vm

Re: ping between vyos router and pa-vm not working

Claw4609 — Thu, 14 Sep 2023 18:31:04 GMT

On to the troubleshoot step that identifies 99% of the issues, checking global counters! Try this and see if it throws something to specifically identify whats stopping it.

How to check global counters for a specific source and destinat... - Knowledge Base - Palo Alto Networks

Re: ping between vyos router and pa-vm not working

OtakarKlier — Fri, 15 Sep 2023 20:18:45 GMT

Hello,

Welcome to the Palo Alto world! When you are performing your ping, are you selecting the external IP of the interface as the source? the PAN will use the management interface by default if nothing was specified. Check the logs to see where the traffic is getting blocked etc.

Cheers!

Re: ping between vyos router and pa-vm not working

jsburgoyne — Mon, 18 Sep 2023 00:43:52 GMT

Well I reinstalled everything over again and for some reason it's working.

IDK what got messed up the last time but it's all good now.

Cheeers.