topic PA3250 - L2 - L3 interface communication in General Topics

PA3250 - L2 - L3 interface communication

fgpautons — Mon, 08 Jun 2020 09:11:18 GMT

Hi Team!

I have simple topology ( pls see at the picture).

I configured eth 1/1 ( for PC2) as L2 interface, but without Security Zone.

I want to ping from PC2 - default Gateway (AE1.121) and PC1.

Is it possible to set up Palo Alto like this?

Pls, give me details, I can't find any use cases with the similar configuration.

Thank you in advance.

rmfalconer — Thu, 11 Jun 2020 20:54:28 GMT

I don't think the L2 port will be able to communicate with an L3 interface.

When you have an L2 subnet and you want communication in/out, you'll need a vlan interface, not an L3 interface.

Why are you connecting a PC directly to the firewall?

OtakarKlier — Mon, 15 Jun 2020 21:54:06 GMT

Hello,

You will need a zone and policies that allow that traffic. Check the logs to see why the traffic is not making it.

Regards,