Cannot Ping Default Gateway

[SudhirK]

Hi Team,

I am trying to set up a lab. I have configured PA and set up a client machine. But I have configured client machine and provided the IP address in the same subnet as one of PA's interface. Even after doing so, I am not able to ping default gateway which is set to one of PA's interface. Can somebody help ???????

[BPry]

@SudhirK,

I'm going to take a guess that you haven't configured the interface with a management profile, and therefore ping requests aren't going to recieve a reply; or you've configured a management profile and you don't have the host you are tying to ping from as a permitted IP address. 

[Sankhya1012]

I have somewhat of a similar problem on a VM installation. Can you help please

https://live.paloaltonetworks.com/t5/General-Topics/PA-VM-6-1-0-Routing-issues/m-p/217068#M62814

[OtakarKlier]

Hello,

I would suggest what @BPry stated, check for management interface profiles that allow ping also security policies that allow ping from the subnets you are sourcing from. 

You could attempt a source ping from your external interface, ping source <external IP of your PAN> host 8.8.8.8

Regards,

[SudhirK]

Hi, 

Thanks for your reply but my issue is not with PA but with Client machine which is connected to PA.

I have configured PA as below.

PA interface VMware workstation    PA IP add                                            Zone

mgmt                 Bridged                                 192.168.0.122/24                       

1/1                      Bridged                                 192.168.0.250/24                          out

1/2                      vmnet 1                                10.1.1.250/24                                   in

1/3                      vmnet2                                 10.2.2.250/2                                      dmz

Ihave connected a client pc in  vmnet1 and configured with ip 10.1.1.25 . Now i am trying to ping gateway which should be 10.1.1.250, but i am not able to ping..

[BPry · Accepted solution]

@SudhirK,

Just to verify though, you actually have a management profile on that interface and it's set to allow ping from 10.1.1.25? If you haven't setup this management profile the PA interface isn't going to respond to a ping request. 

[hfregoso]

Make sure your distributed switch associated to the firewall interface is the same as your host VM. They are directly connected no need to have a route. Do not forget to add your interface profile to allow ping.