topic Internal Gateway configuration problem in General Topics

Internal Gateway configuration problem

hmc_charles — Fri, 30 Aug 2019 10:05:57 GMT

I'm using PA-3220 firewall.

Ethernet 1/1,1/2,1/3,1/4 is connected to main switch, Cisco AP, Internal router and server 10Gb switch.

I setup a GlobalProtect internal gateway for using User-ID and used vlan 1 (192.168.1.2) as the gateway and Portal's IP.

When I used GlobalProtect to connect the Portal (192.168.1.2), it shows “Connection Failed – Please select a gateway to connect manually.”

Is it I cannot used vlan 1 as the Portal and Gateway's interface?

If I cannot use vlan 1, how to fix the problem?

Re: Internal Gateway configuration problem

jdelio — Thu, 31 Oct 2019 21:20:59 GMT

First question that I would have is:

Are you using a GlobalProtect License? as it was required before for an Internal Gateway.

Re: Internal Gateway configuration problem

FarzanaMustafa — Thu, 07 Nov 2019 00:49:26 GMT

Hi @hmc_charles

>Have you checked this below?

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClH1CAK

>Have you tried with a different version of GP?

Re: Internal Gateway configuration problem

Jorge-Sanchez — Thu, 13 Feb 2020 16:07:07 GMT

Hi guy's,

I have this same problem, I run the steps from:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClH1CAK

but I get the same error: please select a gateway to connect manually

The only different is that the internal host detection not is the same ip address the of firewall interface.

Even so, the data entered there is reached from the LAN network and the hostname is resolved by the DNS server.

Who has found the solution to this error?.

Thanks a lot!

Re: Internal Gateway configuration problem

sshel — Wed, 26 Feb 2020 17:31:41 GMT

Do you have PTR for the gateway that points to local IP address? This appears to have fixed for me, actually had to ptr for Global Protect Portal and Gateway, so remove Portal ptr and its working now.