PA default interface state

corporatenw — Thu, 07 Oct 2021 09:50:38 GMT

Hello community 🙂

I've been searching but couldn't find an answer so:

What is the default interface state (out of the box firewall)? Is it forwarding L2 packets? Can I create a L2 loop by connecting two interfaces between FW & a switch?

Re: PA default interface state

PavelK — Thu, 07 Oct 2021 12:32:54 GMT

Thank you for posting question @corporatenw

All firewalls shipped from the factory have two Ethernet ports (ethernet1/1 and ethernet1/2 ) preconfigured as virtual wire interfaces (default-vwire), and these interfaces allow all untagged traffic. The reference is here in the documentation: https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/networking/configure-interfaces/virtual-wire-interfaces.html

The rest of the data plane interfaces are using interface type: Tap. With default configuration you should not cause any loop.

Kind Regards

Pavel

topic PA default interface state in General Topics

PA default interface state

Re: PA default interface state