After deploying PaloAlto in VWire mode the router getting hanged,..

[Gururaj]

Hi All,

After deploying PaloAlto in VWire mode the router getting hanged,.. again after rebooting the router again works fine for hours and again gets hanged (Router have 1G interface).

We have set the negotiation to "Auto" in both PaloAlto and router.. Can any one provide the troubleshooting steps or resolution for this issue.

PANOS is 6.0.0

Model 2050

(as customer says the existing sessions works fine but problem will be with the new sessions ).

Thank you,

Gururaj

Message was edited by: Gururaj Patil

[HULK]

Hello Gururaj,

1. Do you have configured any aggregation protocol on your router..?

2. Could you please verify the packet rate on both PAN and the connected router.

3. Please verify the interface of the router, if any L2 error counters increasing rapidly.

Additional info: Re: Limits of VWIRE?

Thanks

[panos]

is this happening random times after reboot ?

Do you have any asymmetric traffic ?

[Gururaj]

Hi HULK,

Thank you for reply, there is no link aggregation used in router as well as in PaloAlto

Please let me know,how to check packet rates in PaloAlto?

What is L2 errors?

Thank you,

Gururaj

[Gururaj]

Hi panos,

After rebooting the router everything works fine for few hours and again gets hanged ( the existing sessions works fine but problem will be with the new sessions as customer says).

Symmetric traffic only.

Thank you,

Gururaj

[HULK]

Hello Gururaj,

PFB requested commands:

> show running resource-monitor -------- to verify DP CPU, packet buffer and packet descriptor utilization.

> show running logging -------- verify the logging rate on PAN firewall.

> show session info  ------ to see packet rate

Procedure to verify interface error ( on both ingress and egress interface): 

admin@DADA> show counter interface ethernet1/1

Hardware interface counters read from CPU:

--------------------------------------------------------------------------------

bytes received                           1406004

bytes transmitted                        36036

packets received                         18643

packets transmitted                      603

receive errors                           0 >>>>>>>>>>>>>>>>>

packets dropped                          0 >>>>>>>>>>>>>>>>

--------------------------------------------------------------------------------

Logical interface counters read from CPU:

--------------------------------------------------------------------------------

receive errors                           0 >>>>>>>>>>>>>>>>>>>

packets dropped                          0 >>>>>>>>>>>>>>

packets dropped by flow state check      0

forwarding errors                        0

no route                                 0

arp not found                            0

neighbor not found                       0

neighbor info pending                    0

mac not found                            0

packets routed to different zone         0

land attacks                             0

ping-of-death attacks                    0

teardrop attacks                         0

ip spoof attacks                         0

mac spoof attacks                        0

ICMP fragment                            0

layer2 encapsulated packets              0

layer2 decapsulated packets              0

--------------------------------------------------------------------------------

Thanks