topic Re: Flexible vCPU VM Firewall interfaces are down in General Topics

Flexible vCPU VM Firewall interfaces are down

Branislav_Cahoj — Wed, 19 Mar 2025 09:50:53 GMT

Hi,
I have a problem with bringing up interfaces on a VM firewall running with this configuration:

vm-license: VM-SERIES-2

vm-cap-tier: T1-5GB

vm-cpu-count: 2

vm-memory: 5061728

vm-mode: VMware ESXi

sw-version: 11.1.4-h13

show interface hardware

total configured hardware interfaces: 2

name id speed/duplex/state mac address

--------------------------------------------------------------------------------

ethernet1/1 16 ukn/ukn/down((autoneg)) 00:50:56:90:b4:e1

ethernet1/3 18 ukn/ukn/down((autoneg)) 00:50:56:90:82:a3

When I changed vCPU 4 Memory 8GB interfaces are up and running.

Is it software bug or some problem with running on ESX platform?

If sombody has a working setup vCPU2 and Memory 6GB (or less) what sw-version do you use?

Thanks

Re: Flexible vCPU VM Firewall interfaces are down

CosminM — Wed, 19 Mar 2025 19:03:34 GMT

Hello @Branislav_Cahoj

I recommend to make a fresh deployment with Pan-OS 11.1.2-h13 or any other sw version prior to 11.1.3. Starting with version 11.1.3 for ESXI deployment, the base image has VM hardware compatibility version 15. All previous VM firewall based images for ESXi has VM hardware compatibility version 10.

Re: Flexible vCPU VM Firewall interfaces are down

GabrielDumitru — Wed, 19 Mar 2025 20:28:47 GMT

Hi Branislav_Cahoj,

I've tried to deploy the same version of pa-vm 11.1.4-h13 on host esxi 7.0.3, 203283, default settings (2vcpu, 5.5GB Ram) with no problems, but deployed on host esxi 8.0.3, 2441450 and the issue is as you describe it. So, it's weird.

In my lab (host esxi 8.0.3) to work with 2vcpu and 5.5Gb, I deployed PA-VM-ESX-11.1.0 and upgraded it to the version 11.2.4-h4 (with VM hardware compatibility version 10).

Thx,

Re: Flexible vCPU VM Firewall interfaces are down

Branislav_Cahoj — Thu, 20 Mar 2025 11:26:26 GMT

Thanks @CosminM, it works for me to deply fresh software version 11.1.2

vm-license: VM-SERIES-2
vm-cap-tier: T1-5.5GB
vm-cpu-count: 2
vm-memory: 5577872
sw-version: 11.1.2

Hypervisor: VMware ESXi, 8.0.3, 24585383

I tried to update to version 11.1.4 that ended up with interfaces again in DOWN state.

I also tied the setup 3vCPU and 8GB of memory with version 11.1.4 and interfaces are UP

The goal was to find the minimal configuration to save credits.

Re: Flexible vCPU VM Firewall interfaces are down

Branislav_Cahoj — Thu, 20 Mar 2025 11:44:28 GMT

Update: I tried to update to version 11.1.4 that ended up with interfaces in UP state.