topic Re: (DUP!) when pinging from the firewall in General Topics

(DUP!) when pinging from the firewall

GavinPalmer — Mon, 14 Aug 2017 19:49:19 GMT

Hi guys,

Strange issue here which I'm hopeing to get resolved. I was SSH'ed into the our PA VM-100 today and happened to run the command >ping host 8.8.8.8. This resulted in 100% (DUP!) replies on the ICMP replies. However, when I specify the source and host I dont get this issue.

Any ideas why this could be happening?

Thanks

Re: (DUP!) when pinging from the firewall

Raido_Rattameister — Mon, 14 Aug 2017 19:59:10 GMT

ping host 8.8.8.8 - ping requests are sent from mgmt interface on mgmt plane

ping source x.x.x.x host 8.8.8.8 - ping requests are sent from interface on dataplane (x.x.x.x is L3 interface IP)

What exactly happened? Duplicates?

You should review your switching infrastructure.

Re: (DUP!) when pinging from the firewall

TranceforLife — Tue, 15 Aug 2017 17:07:11 GMT

Interesting,

Something (ping request or reply) somewhere gets duplicated. What is happening if you are pinging cisco.com website (hehe bad example)? Do you get the same result? Run a PCAP from mgmt interface on Palo (at least will give you some visibility) to see if you are getting 2 responses back etc.

Re: (DUP!) when pinging from the firewall

BrianRa — Wed, 16 Aug 2017 19:42:00 GMT

We had this happen a while back on one of our firewalls while we were setting it up. If I remember correctly we didn't have the gateway on the management interface configured (or maybe configured properly).

Type:

> configure

# show deviceconfig system

You should see this line in the configuration:

default-gateway 10.10.10.10; (example IP)

Brian

Re: (DUP!) when pinging from the firewall

TranceforLife — Wed, 16 Aug 2017 19:46:19 GMT

I am not sure if you can send any traffic outside your local network without or with an incorrectly configured gateway.