ARP refresh in firewall if replacing the connected device

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

ARP refresh in firewall if replacing the connected device

L3 Networker

we are changing the core device hardware connected to Palo alto firewall inside interface. To minimize downtime we will be moving inside interface of secondary passive firewall to new secondary core and then we will make it active by suspending primary firewall.

Is there any ARP issue or delay in arp refresh on Secondary firewall as we will live the connectivity with new core device which will have new mac.?


L2 Linker

Hello @Deepak25 

To minimize any potential impact from the upcoming change, please consider the following steps:

  1. Ensure that any static routes, PBF policies, or NAT policies are configured by IP address rather than interface, as the interface in the secondary firewall will be different.
  2. After suspending the primary firewall, clear the ARP table on the old inside interface.

Lastly, the ARP refresh is really fast and there should not be any significant delay.

Jorge Pomachagua
  • 1 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!