topic VM series firewalls and interfaces in General Topics

VM series firewalls and interfaces

aldo-escobar — Fri, 09 May 2025 21:17:04 GMT

Howdy all

I have deployed 2 VM series firewalls in VMware workstation pro but I can't get their dataplane interfaces to ping each other. I'm sure this has to do with how to configure the network adapters.

I have no issues accessing the GUIs/ Management interfaces and they can ping each other as these interfaces are bridged in Vmware workstation.

dataplane interfaces should be able to ping each other, as that is the purpose of LAN segment, to put them on an isolated network so the VMs can see each other on the network. I want to do this that I can play with routing only between these 2 VM firewalls.

so from eth1/1 PAVM1 to eth1/1 PAVM2,

admin@PA-VM> ping source 99.99.99.1 host 99.99.99.2
PING 99.99.99.2 (99.99.99.2) from 99.99.99.1 : 56(84) bytes of data.
^C
--- 99.99.99.2 ping statistics ---
5 packets transmitted, 0 received, 100% packet loss, time 128ms

pavm1

Network Adapter 1 (eth0/management interface) is Bridged

Network Adapter 2 (eth1/dataplane interface) is on LAN segment 1

pavm2

Network Adapter 1 (eth0/management interface) is Bridged

Network Adapter 2 (eth1/dataplane interface) is on LAN segment 1

Re: VM series firewalls and interfaces

TomYoung — Sun, 11 May 2025 20:56:42 GMT

Hi @aldo-escobar ,

Have you attached an interface management profile to the interfaces that allow ping?

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-networking-admin/configure-interfaces/use-interface-management-profiles-to-restrict-access

Thanks,

Tom

Re: VM series firewalls and interfaces

aldo-escobar — Sun, 11 May 2025 22:01:19 GMT

Hello Tom,

Management profiles are attached to interfaces.

Re: VM series firewalls and interfaces

aldo-escobar — Mon, 12 May 2025 19:50:22 GMT

Hello Tom,

I'm such a goofball, needed a break and review my settings. Turns out on one of the interfaces I did not attach a zone and a virtual router. This was missing. I configured the zone and virtual router, it now works. I could've swore I already did that part.

Thank You!