Can not ping Management interface

[quocthinh.9666]

Hi everyone,

Thanks.

[mshekh]

Hi @quocthinh.9666 ,

Please verify if the source IP is added into allowed IP list. Please refer the below KB to check the permitted IP list.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClovCAC

[quocthinh.9666]

Hi Mshekh,

Now i am not config any permitted IP. But VMs on network-B can ping to Palo-A and opposite.

For e.x: VM on [network-B ip 10.10.2.10] can ping [Palo-A IP 10.10.1.1] but can not ping [Palo-B IP 10.10.2.1]

[mshekh]

Hi @quocthinh.9666 ,

May I suggest to check if there is any intermediate devices, May be  some connectivity issue or intermediate device blocking the connection as no special configuration required to enable the communication execpt the screenshot which you shared. If traffic is directly flowing between two different networks.

[Brandon_Wertz]

@quocthinh.9666 -- Since the management interface can be pinged from outside of the subnet I'm going to assume everything is good from the management profile perspective, but check that.  Are there other hosts in the same management network on the same nodes (A or B?)  Can VM from node A ping something in node A?  Does the node A switch see the MAC of both the VM and the firewall?  The management interface isn't using a unique service route?  I would also confirm the subnet mask and default gateway value are correct.