topic Layer 3 VLan on PAN OS in General Topics

Layer 3 VLan on PAN OS

riverj30 — Wed, 22 Aug 2012 16:10:49 GMT

Hi all,

I'm hoping someone can help shed some light on an issue I'm having.

quick diagram:

Vlan 9 (Layer 3 Interface for Vlan 9) VLAN 9

(CISCO SWITCH)-------------[PALO ALTO]---------------(CISCO SWITCH)

| |

{HOST A} {HOST B}

What would be the ideal configuration for the above setup?

Config on PA

- Layer 3 Interface for Vlan 9

- Create VLan 9 and associated with corresponding Vlan interface

- Create proper policy to allow traffic flow

Testing

- From host A i try to ping the IP address of the Vlan 9 Layer3 interface but I get no response

Re: Layer 3 VLan on PAN OS

mikand — Fri, 24 Aug 2012 05:49:40 GMT

If your purpose is that HOST A should be able to reach HOST B at layer2 then I would configure the two interfaces at the PA box as layer2. And then create a vlan-interface in the PA which will be the default gw for HOST A and B.

In order to be able to ping the PA itself you need to setup a management profile which you attach to your (in this case) vlan-interface.

When you configure the management profile you can select which of the following protocols should be allowed towards the PA ip-address:

Ping

Telnet

SSH

HTTP

HTTPS

SNMP

Response Pages

along with permitted ip addresses.

Re: Layer 3 VLan on PAN OS

sdurga — Fri, 24 Aug 2012 15:35:03 GMT

https://live.paloaltonetworks.com/docs/DOC-2011