Features column in Network Interface shows an IPSec Gateway

[KenKrause]

I have a HA pair of PA 5220s at the HQ location and a PA-850 at a secondary DR location. We have about 100 remote sites that have a primary Site-to-Site VPN connection to HQ and a secondary connection to the DR location. Each of which have their own IKE Gateway configuration. I've just noticed that when I look at the Network/Interfaces/Ethernet at HQ and DR, the Outside interface has a single IKE gateway showing up in the Features column. What is the purpose of this?

Everything seems to be working, I just found it odd that this would appear. We're running 10.1.10-h2

Thanks

Ken

[Raido_Rattameister]

It shows what features this interface has attached to.

Here is example if you attach QoS, IKE and LLDP at the same time.

[KenKrause]

Thanks for the response. I understand what the column is for but what I don't understand is why there is only 1 Ike gateway showing as attached when we have almost 100. If I hover over the Ike gateway, the name displayed isn't even for the gateway at the device. It's for one of the remote sites, not the Gateway assigned at the interface.

Thanks

[BPry · Accepted solution]

@KenKrause,

It's just parsing the configuration and displaying the last entry utilizing that interface. I honestly couldn't tell you why PAN feels the need to display the entry utilizing the interface at all, but that's just what they've decided to do. Regardless of how many gateways you have, you'll only ever see a single entry.

The same behavior is displayed for any other feature you have assigned to the interface. You'll see the exact same behavior for GlobalProtect Portal/Gateway as well, where regardless of how many you have assigned to the interface it'll only show a single entry in the GUI under interfaces.

[KenKrause]

Thanks for the clarification. I was beginning to think I had a misconfiguration or some other issue.

Thanks