topic Show Commands to Verify L3 Sub-interface Configuration in General Topics

Show Commands to Verify L3 Sub-interface Configuration

cpatte7372 — Tue, 17 May 2016 14:15:40 GMT

Hello Community,

I have configured L3 Sub-Interface on a Palo Alto firewall in a virtual environment. Can someone please let me know if there are any show commands to verify that the configuration is working successfully?

Thank you

Carlton

Re: Show Commands to Verify L3 Sub-interface Configuration

clyde.franklin — Wed, 18 May 2016 03:02:57 GMT

Shoudl be show interface adn interface#/#.# Build int lab to confirm

admin@PALO-TIA-03P(active-primary)> show interface ethernet1/3.10

--------------------------------------------------------------------------------
Name: ethernet1/3.10, ID: 1035, 802.1q tag: 10
Operation mode: layer3
Interface IP address: 2.2.2.2/32
Interface management profile: N/A
Service configured:
Zone: N/A, virtual system: vsys1
Adjust TCP MSS: no
--------------

Re: Show Commands to Verify L3 Sub-interface Configuration

cpatte7372 — Wed, 18 May 2016 08:49:33 GMT

Hi Clyde,

Thanks for getting back to me.

Aren't there any other show commands than the one you provided below?

Regards

Re: Show Commands to Verify L3 Sub-interface Configuration

kiwi — Wed, 18 May 2016 10:13:09 GMT

This info is also included in the command Clyde provided but doing 'show counter interface ethernet1/3.10' shows logical interface numbers ... any number other than 0 should indicate traffic going through the logical interface. For physical counters you should use the physical interface.

admin@PA-VM> show counter interface ethernet1/3.10

Interface: ethernet1/3.10

--------------------------------------------------------------------------------

Logical interface counters read from CPU:

--------------------------------------------------------------------------------

bytes received 25406

bytes transmitted 0

packets received 285

packets transmitted 0

receive errors 0

packets dropped 236

packets dropped by flow state check 0

forwarding errors 0

no route 236

arp not found 0

neighbor not found 0

neighbor info pending 0

mac not found 0

packets routed to different zone 0

land attacks 0

ping-of-death attacks 0

teardrop attacks 0

ip spoof attacks 0

mac spoof attacks 0

ICMP fragment 0

layer2 encapsulated packets 0

layer2 decapsulated packets 0

--------------------------------------------------------------------------------

Hope it helps.

-KiWi.

Re: Show Commands to Verify L3 Sub-interface Configuration

cpatte7372 — Wed, 18 May 2016 10:50:25 GMT

Thanks KiWi