(DUP!) when pinging from the firewall

[GavinPalmer]

Hi guys,

Strange issue here which I'm hopeing to get resolved.  I was SSH'ed into the our PA VM-100 today and happened to run the command >ping host 8.8.8.8.  This resulted in 100% (DUP!) replies on the ICMP replies.  However, when I specify the source and host I dont get this issue.

Any ideas why this could be happening?

Thanks

[Raido_Rattameister]

ping host 8.8.8.8 - ping requests are sent from mgmt interface on mgmt plane

ping source x.x.x.x host 8.8.8.8 - ping requests are sent from interface on dataplane (x.x.x.x is L3 interface IP)

What exactly happened? Duplicates?

You should review your switching infrastructure.

[TranceforLife]

Interesting,

Something (ping request or reply) somewhere gets duplicated. What is happening if you are pinging cisco.com website (hehe bad example)? Do you get the same result? Run a PCAP from mgmt interface on Palo (at least will give you some visibility) to see if you are getting 2 responses back etc.

[BrianRa]

We had this happen a while back on one of our firewalls while we were setting it up.  If I remember correctly we didn't have the gateway on the management interface configured (or maybe configured properly).

Type:

> configure

# show deviceconfig system

You should see this line in the configuration:

  default-gateway 10.10.10.10; (example IP)

Brian

[TranceforLife]

I am not sure if you can send any traffic outside your local network without or with an incorrectly configured gateway.