topic Re: Cannot Ping Default Gateway in General Topics

Cannot Ping Default Gateway

SudhirK — Thu, 07 Jun 2018 19:43:20 GMT

Hi Team,

I am trying to set up a lab. I have configured PA and set up a client machine. But I have configured client machine and provided the IP address in the same subnet as one of PA's interface. Even after doing so, I am not able to ping default gateway which is set to one of PA's interface. Can somebody help ???????

Re: Cannot Ping Default Gateway

BPry — Thu, 07 Jun 2018 19:46:44 GMT

@SudhirK,

I'm going to take a guess that you haven't configured the interface with a management profile, and therefore ping requests aren't going to recieve a reply; or you've configured a management profile and you don't have the host you are tying to ping from as a permitted IP address.

Re: Cannot Ping Default Gateway

Sankhya1012 — Thu, 07 Jun 2018 19:53:13 GMT

I have somewhat of a similar problem on a VM installation. Can you help please

https://live.paloaltonetworks.com/t5/General-Topics/PA-VM-6-1-0-Routing-issues/m-p/217068#M62814

Re: Cannot Ping Default Gateway

OtakarKlier — Thu, 07 Jun 2018 20:49:39 GMT

Hello,

I would suggest what @BPry stated, check for management interface profiles that allow ping also security policies that allow ping from the subnets you are sourcing from.

You could attempt a source ping from your external interface, ping source <external IP of your PAN> host 8.8.8.8

Regards,

Re: Cannot Ping Default Gateway

SudhirK — Fri, 08 Jun 2018 07:12:03 GMT

Hi,

Thanks for your reply but my issue is not with PA but with Client machine which is connected to PA.

I have configured PA as below.

PA interface VMware workstation PA IP add Zone

mgmt Bridged 192.168.0.122/24

1/1 Bridged 192.168.0.250/24 out

1/2 vmnet 1 10.1.1.250/24 in

1/3 vmnet2 10.2.2.250/2 dmz

Ihave connected a client pc in vmnet1 and configured with ip 10.1.1.25 . Now i am trying to ping gateway which should be 10.1.1.250, but i am not able to ping..

Re: Cannot Ping Default Gateway

BPry — Fri, 08 Jun 2018 15:14:58 GMT

@SudhirK,

Just to verify though, you actually have a management profile on that interface and it's set to allow ping from 10.1.1.25? If you haven't setup this management profile the PA interface isn't going to respond to a ping request.

Re: Cannot Ping Default Gateway

hfregoso — Sat, 09 Jun 2018 08:04:46 GMT

Make sure your distributed switch associated to the firewall interface is the same as your host VM. They are directly connected no need to have a route. Do not forget to add your interface profile to allow ping.