topic Re: PA-VM MGT not reachable in GCP. in General Topics

PA-VM MGT not reachable in GCP.

Nischal — Wed, 18 Dec 2024 00:19:07 GMT

I have PA-VM deployed in GCP with SD-WAN. PA-VM sits behind SD-WAN for intranet traffic.
attached image is how my setup looks like .

Query.

I can't reach firewall mgmt via internal network (access via Public IP to mgt Public works fine) . everything on private interface (Eth1/1) works fine.
We have return routing in place for MGT subnet in GCP route table ( RFC1918 pointing to mgt-subnet GW in GCP) . Wondering where the issue lies.

Re: PA-VM MGT not reachable in GCP.

OtakarKlier — Thu, 19 Dec 2024 19:14:01 GMT

Hello,

Check the logs to see where/if the traffic is getting blocked. Could be several reasons for this not working.

Regards,

Re: PA-VM MGT not reachable in GCP.

Nischal — Fri, 03 Jan 2025 14:07:05 GMT

logs indicate firewall mgmt no responding . firewall is allowing . their is recieved bytes but no send bytes

Re: PA-VM MGT not reachable in GCP.

Nischal — Thu, 30 Jan 2025 05:44:10 GMT

GCP routing is not that straight forward . Atleast in our setup. Importing routes from source VPC to desired VPC fixed the issue . However , it broke something else. So we had to rollback changes. We had to fix routing to ensure fw mgt services are not impacted ( like UID ) . But as routing mgt vpc was diffcult, we decided to move required fw mgmt services to data interface . eth 1(lan) .

Inshort , above solution is the workaround we implemented . Note fw mgmt is still unreachable