topic Trouble getting through to VMWare interfaces from VM-100 in General Topics

Trouble getting through to VMWare interfaces from VM-100

LCMember4427 — Wed, 09 May 2018 20:00:14 GMT

Hi,

We have migrated a PA500 500 config to a newly installed VM-100 (ver. 8.1) running as the only VM under a standalone ESXi 6.5 host (not in vSphere). All interfaces are assigned and I have verified the assignment of each by plugging and unplugging cables and checked the different vmnics' status. Furthermore all the VM-100 interfaces are correctly assigned to each VMWare virtual port groups and vSwitches.

However something is prohibiting traffic, when connecting a notebook directly to vmnic ports assigned to VM-100 interfaces with basic DHCP servers involved (no VLANs etc) I'm not able to receive an IP lease or ping the VM-100 interface.

What is the culprit? Do you have some white paper describing how to troubleshoot this situation? There must be something obvious I have missed.... Please comment.

regards Tor

Re: Trouble getting through to VMWare interfaces from VM-100

OtakarKlier — Wed, 09 May 2018 22:22:09 GMT

Hello,

For the ping part, try th efollowing:

https://www.paloaltonetworks.com/documentation/80/pan-os/web-interface-help/network/network-network-profiles-interface-mgmt

You migth also need associated security policies to allow the ping. To verify, put in a DENY all rule at the end and set it to log at session end so you can see which rule the ping is hitting.

For the DHCP issue, what is handing out the address?

Regards,

Re: Trouble getting through to VMWare interfaces from VM-100

LCMember4427 — Thu, 10 May 2018 05:59:39 GMT

Thanks for the ping tips.

As of DHCP it is the VM-100. I use its standard DHCP server settings that have always worked.

Tor