topic Re: Can not ping Management interface in General Topics

Can not ping Management interface

quocthinh.9666 — Fri, 09 May 2025 04:41:44 GMT

Hi everyone,

Thanks.

Re: Can not ping Management interface

mshekh — Sat, 03 May 2025 00:55:43 GMT

Hi @quocthinh.9666 ,

Please verify if the source IP is added into allowed IP list. Please refer the below KB to check the permitted IP list.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClovCAC

Re: Can not ping Management interface

quocthinh.9666 — Mon, 05 May 2025 02:20:10 GMT

Hi Mshekh,

Now i am not config any permitted IP. But VMs on network-B can ping to Palo-A and opposite.

For e.x: VM on [network-B ip 10.10.2.10] can ping [Palo-A IP 10.10.1.1] but can not ping [Palo-B IP 10.10.2.1]

Re: Can not ping Management interface

mshekh — Mon, 05 May 2025 06:13:39 GMT

Hi @quocthinh.9666 ,

May I suggest to check if there is any intermediate devices, May be some connectivity issue or intermediate device blocking the connection as no special configuration required to enable the communication execpt the screenshot which you shared. If traffic is directly flowing between two different networks.

Re: Can not ping Management interface

Brandon_Wertz — Mon, 05 May 2025 12:57:50 GMT

@quocthinh.9666 -- Since the management interface can be pinged from outside of the subnet I'm going to assume everything is good from the management profile perspective, but check that. Are there other hosts in the same management network on the same nodes (A or B?) Can VM from node A ping something in node A? Does the node A switch see the MAC of both the VM and the firewall? The management interface isn't using a unique service route? I would also confirm the subnet mask and default gateway value are correct.