adding zone and subinterfaces

Reply
Highlighted
L1 Bithead

adding zone and subinterfaces

Hello 

 

I have panorama 9.0.4 and palo alto fw 8.1.7

 

we are not using templates

 

I have to create 6 zone and subinterfaces . So do i need to create them locally on the firewall ?

 

Will it get sync to panorama automatically ? or do i have to do something to sync with Panorama ?

 

or do i have to load the device to panorama and change the context to the active FW and then do the changes ?

 

Please suggest how to make zone and subinterfaces

 

Next to this , the zone which we have to  make are already part of another firewall - so can we create same name of zones on two different firewalls ?  but both are managed through Panorama

Highlighted
Community Team Member

Re: adding zone and subinterfaces

Hi @FWPalolearner 

 

If you don't use templates then configure the zones and interfaces locally on the firewalls.

 

The panorama sync doesn't care about local config so it shouldn't be impacted by performing local config changes. 

You're not using templates so that part isn't managed by Panorama.  Using the same zones on different firewalls shouldn't matter.

 

Cheers,

-Kiwi.

 
Highlighted
L1 Bithead

Re: adding zone and subinterfaces

Hello Kiwi,

 

Thanks for your reply.

 

My point is suppose if I create a zone "ABC" locally on the firewall, will that zone be visible in panorama ?

W

are using device groups so if I have to create a rule for zone ABC , will panorama automatically shows it or do I have to click on add new zone in panorama with same name "ABC" 

Highlighted
L1 Bithead

Re: adding zone and subinterfaces

Anyone please ?

 

Will the zone automatically appear in panorama while creating the rules ?

 

 

 

Tags (1)
Highlighted
Community Team Member

Re: adding zone and subinterfaces

Hi @FWPalolearner ,

 

No, zones created locally on the FW will not appear automatically in PAnorama:

NEW ZONE NOT VISIBLE IN PANORAMA 

 

Cheers,

-Kiwi.

Tags (1)
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!