topic Management Interface not sending a frame. in General Topics

Management Interface not sending a frame.

jmarchant — Tue, 08 May 2018 16:22:33 GMT

I have two PaloAlto 850's in HA. I am unable to ping or reach the secondary/standby webgui. Both are connected to the same switch, when looking at the switch CAM table the secondary MGMT interface is not getting populated with the FW MAC address. Being that the switch is not recieving a frame from the FW to populate the CAM table I have tried the following: I have swapped out cables, interfaces on the switch and rebooted the FW multiple times.

Has anyone else ran into this issue or may have a suggestion?

TIA

Re: Management Interface not sending a frame.

OtakarKlier — Tue, 08 May 2018 17:06:03 GMT

Hello,

Just to make sure, both the active and standby PAN's have different management IP's? Do the vlans on the switch match the IP subnets of the PAN's?

The management interface should always have a light and be accessible even if it is the standby HA pair.

Just thinking out loud.

Regards,

Re: Management Interface not sending a frame.

jmarchant — Tue, 08 May 2018 17:18:09 GMT

Indeed, both are in the same subnet and VLAN and they both have a different MGMT IP.

I even swaped the cable plugged into the primary and secondary MGMT interface and the issue followed.

Re: Management Interface not sending a frame.

OtakarKlier — Tue, 08 May 2018 17:30:05 GMT

Perhaps try a different IP on the same subnet?

Re: Management Interface not sending a frame.

jmarchant — Tue, 08 May 2018 19:00:47 GMT

Not sure the IP matters at this point. When the interface comes up it should send an ethernet frame to the connected device with its MAC. In this case it appears the FW is not sending that frame to let the switch know the MAC that's connected.

Re: Management Interface not sending a frame.

OtakarKlier — Tue, 08 May 2018 19:02:58 GMT

Maybe there is something in the switch logs?

Re: Management Interface not sending a frame.

theonewhoknocks — Wed, 09 May 2018 09:29:13 GMT

Hi @jmarchant, from the switch perspective can you see that the port is (UP/UP)? Have you tried manually adding the mac address on the switch mac table?

Re: Management Interface not sending a frame.

jmarchant — Wed, 09 May 2018 16:03:35 GMT

Something got corrupted in the config itself. After reloading a named config file it started working.