topic Re: Use VM-100 With Could Provider - MAC Issues in General Topics

Use VM-100 With Could Provider - MAC Issues

khansen — Wed, 20 Aug 2014 19:15:53 GMT

We are trying to set up a VM-100 as the entry point to a virtual data center. We have run into an issue with the MAC addresses on the VM device not matching the MAC addresses on the Palo interfaces. We appear to be stuck at this point. Apparently it is not possible to change the MAC addresses inside the Palo. We approached the cloud provider about changing the MAC on their end, and were told:

Because of vCloud limitations... the MAC that must be used both at the vCloud layer and at the Palo Alto layer must be a VMware MAC.

Has anyone else attempted this type of setup? Any thoughts or suggestions? The only suggestion put forward by both the cloud provider and Palo Support was to enable promiscuous mode, which is not an option for us.

Re: Use VM-100 With Could Provider - MAC Issues

hshah — Thu, 21 Aug 2014 17:17:56 GMT

Hi Khansen,

PANW-VM can work in following combination.

1. Enable Promiscous mode and also MAC address Change for that interface.

2. Disable Promiscuous mode and hardcode PANW-VM MAC addresses on ESXi

Bottom line is you can never change MAC address of the VM.

In this scenario I dont see any solution.

Regards,

Hardik Shah

Re: Use VM-100 With Could Provider - MAC Issues

hshah — Mon, 25 Aug 2014 18:11:46 GMT

Hello Khansen,

Let me know for additional queries.

Regards,

Hardik Shah

Re: Use VM-100 With Could Provider - MAC Issues

khansen — Mon, 25 Aug 2014 19:00:54 GMT

Hardik,

As the MAC cannot be changed in the VM, and it also cannot be changed in vCloud, we have no choice other than to abandon this effort. It looks like we will have to use a firewall from another vendor.

Thanks.

Ken

Re: Use VM-100 With Could Provider - MAC Issues

hshah — Mon, 25 Aug 2014 19:02:51 GMT

Hi Khansen,

I would suggest to contact Sales Engineer for the account. They are master in Deployment, he should be able to provide some work around.

Have a word with him, and let me know for additional query.

Regards,

Hardik Shah