How to Allow Ping and ICMP on Layer 3 Interface of Your Palo Alto Networks Device

Overview

To allow Ping and other management traffic, configure an Interface Management Profile and apply it to the interface.

Steps

1. Go to Network > Network Profiles > Interface Mgmt
2. Create a profile allowing ping:
   
3. Go to Network > Interfaces and assign the profile, created above, to the interface under the Advanced tab:
   
4. Commit the changes

From CLI:

1. > configure
2. # set network profiles interface-management-profile mgmt ping yes
3. # set network interface ethernet ethernet1/3 layer3 interface-management-profile mgmt

owner: panagent