topic PA-3410: L3 interface configuration / ping from disconnected port? in General Topics

PA-3410: L3 interface configuration / ping from disconnected port?

sascha0901 — Fri, 13 Oct 2023 10:35:04 GMT

Hello everyone,

I got a PA-3410, it's up and running for a while as an internet gateway to a local network. It's configured with static ip4 addresses, source NAT, security zones, default route etc, everythings working good.

Recently I remotely configured an additional ethernet port (L3) but I'm not able to ping an internet destination with it (ping source [IP Adress of L3 Interface] host 8.8.8.8), although I'm able to ping local network adresses, for instance other L3 Ports of PA-3410.

In contrast to that, another interface I configured earlier works perfectly, although in CLI both configurations look identical (except IP adress for sure), same security zone, virtual router, etc.

So I think the only difference between the working and the non-working interface is that on the working one has a different link status as there is an end device connected, and the newly configured device has runtime link state down, as no device is connected (and never was to this port, yet).

So my assumption is, that it might not be possible to get a succesful ping to/from internet destinations if there is no end device connected. Am I right? In case yes, what's the explanation for this?

Thanks a lot for your help

Re: PA-3410: L3 interface configuration / ping from disconnected port?

sascha0901 — Sat, 14 Oct 2023 15:13:20 GMT

Anyone got a hint here what to check? Currently I'm not able to physically connect a host to the port.

Thank you

Re: PA-3410: L3 interface configuration / ping from disconnected port?

Raido_Rattameister — Sat, 14 Oct 2023 23:35:45 GMT

You can't initiate source ping to external resources from interface that is down.

Also interfaces that are down are not added to virtual router's forwarding table.

Re: PA-3410: L3 interface configuration / ping from disconnected port?

sascha0901 — Mon, 16 Oct 2023 08:25:12 GMT

this is what I assumed. Thank you very much for your help!