Cannot Ping SubInterface

[wocomike]

Hi All,

I recently added a sub-interface on a trunk to a Cisco switch.  This trunk has several other VLAN's going to it, and all seem to respond fine on their IP's.  This one I cannot ping from the Cisco switch on the same VLAN.

Ethernet1/1.273 has an IP of 10.200.73.2/24 on it, with a management profile to allow ping from 0.0.0.0/0

On the Cisco switch that the trunk is coming from, I have an SVI on VLAN 273 with an IP of 10.200.73.1/24 

If I do a ping 10.200.73.2 source vlan 273  from the Cisco I get no replies.

When I do a show interface ethernet1/1.273 on the PAN CLI the dropped packet counter increments for every ping that I send.  It's like that management profile isn't working.

Thanks in advance!

[kattaullah]

On the management profile, could you please check the entries under "Permitted IP address"

[rborda]

Have you enabled Zone protection profile. To verify go to Network -> Zones , open the zone associated with the interface and at the bottom of the pane you should if you have it enabled or not.

[wocomike]

There are no zone protection profiles enabled.

The permitted IP's for the mgmt profile is 0.0.0.0/0

[wocomike]

Hi,

I think I may have found another clue.  Please see attachment.  It looks like it's running the traffic through the firewall rules, and it's traffic within the same zone.

-Mike