topic Re: Problem in making palo alto test lab in General Topics

Problem in making palo alto test lab

ahmed.ashraf — Mon, 31 Jul 2017 14:42:07 GMT

Dears ,

i installed palo alto ova and windows xp client and host is windows 10 , i am trying to make a test lab using cbtnuggets and my configuration as the following :

1- windows XP is on VMnet3 and has IP : 10.3.3.11/24

2- i added all VMnet to palo alto virtual machine to be able to make inside , DMZ and outside

3- i configured interface 1/1 in the same range of windows XP client : 10.3.3.10/24 , VR is default , Zone : inside

4- Host VMnet 3 IP is : 10.3.3.1/24

5- MAC addresses are different

6- palo alto able to ping google.com

issue is : host and XP can't ping palo alto interface 1/1 although host and XP can ping each other

i tried to use different VMnet still the same issue , tried to configure other interface in palo alto with different IP even in outside also can't ping

please i want your fast response and help

Re: Problem in making palo alto test lab

TranceforLife — Mon, 31 Jul 2017 14:57:49 GMT

Is mgmt profile attached and allowing ping to the interface 1/1?

Re: Problem in making palo alto test lab

DonohoeRobert — Mon, 31 Jul 2017 15:19:54 GMT

Hi Mate,

Just remember when setting the interfaces up, the first one is managment, second is 1/1, third is 1/2

best regards,

Rob

Re: Problem in making palo alto test lab

RichColeman — Tue, 01 Aug 2017 10:32:30 GMT

Have a look at EVE-NG, its slighty easier than GNS3 for integrating a Palo. You don't have to worry about playing about with specific VMNIC mappings etc.

Re: Problem in making palo alto test lab

TranceforLife — Tue, 01 Aug 2017 10:39:44 GMT

l love GNS3 but never heard about this EVE-NG project. Something new today! Thanks

Re: Problem in making palo alto test lab

MohamedSharief — Wed, 09 Aug 2017 09:49:25 GMT

Hi Ahmed,

If you are sure about the vmware configurations then you need to enable some feature for PA VM only in order to be able to ping from the XP client to PA trust interface:

Without enabling this you won't be able to ping from your host to the trust interface of PA VM.

You can find it in Device> Setup> Management> General Settings.

Let me know if that worked with you!

Regards,

Sharief