topic Re: Can't access management when PA200 is in line in General Topics

Can't access management when PA200 is in line

kbreit — Sat, 23 Jul 2016 03:44:00 GMT

I have a PA200 and when I only have the management port plugged in, I can access the management interface. When I put it inline and have production traffic running through it, I'm no longer able to access the management interface. I have two NAT rules: one for a Playstation and one for general outbound using DIPP. I need to do some troubleshooting, but would anyone know why this is happening? Here is my Playstation NAT rule (which I think is the culpret).

Source zone: home

Destination zone: internet

Source address: playstation4

Source translation: static-ip, Internet IP (address), and bi-directional enabled

Re: Can't access management when PA200 is in line

TranceforLife — Sat, 23 Jul 2016 08:20:48 GMT

Hi,

From where you are trying to access it: local net or Internet?

What is your default gateway on the mgmt interface? Does it have an Internet access?

Re: Can't access management when PA200 is in line

pulukas — Sat, 23 Jul 2016 13:02:35 GMT

Check the traceroute to your mgmt address and see where it goes. I suspect your traffic may be going through the production flow and nat interfaces and not reaching your mgmt subnet.

Re: Can't access management when PA200 is in line

BPry — Mon, 25 Jul 2016 13:51:43 GMT

If you are just trying to do this for testing purposes I would simply open up a new remote management profile and assign it to a port on your trust "home" zone, you should then be able to access the management interface and SSH into the device directly from the IP address assigned to that port.

P.S this is written assuming that you have layer 3 ports instead of layer 2; if you are using layer 2 in a home enviroment I might suggust just reorganzing to Layer 3 anyways since you get access to a few more things on the PA interface.