Features column in Network Interface shows an IPSec Gateway

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Features column in Network Interface shows an IPSec Gateway

L1 Bithead

I have a HA pair of PA 5220s at the HQ location and a PA-850 at a secondary DR location. We have about 100 remote sites that have a primary Site-to-Site VPN connection to HQ and a secondary connection to the DR location. Each of which have their own IKE Gateway configuration. I've just noticed that when I look at the Network/Interfaces/Ethernet at HQ and DR, the Outside interface has a single IKE gateway showing up in the Features column. What is the purpose of this?

Everything seems to be working, I just found it odd that this would appear. We're running 10.1.10-h2

 

Thanks

Ken

1 accepted solution

Accepted Solutions

Cyber Elite
Cyber Elite

@KenKrause,

It's just parsing the configuration and displaying the last entry utilizing that interface. I honestly couldn't tell you why PAN feels the need to display the entry utilizing the interface at all, but that's just what they've decided to do. Regardless of how many gateways you have, you'll only ever see a single entry.

The same behavior is displayed for any other feature you have assigned to the interface. You'll see the exact same behavior for GlobalProtect Portal/Gateway as well, where regardless of how many you have assigned to the interface it'll only show a single entry in the GUI under interfaces.

View solution in original post

4 REPLIES 4

Cyber Elite
Cyber Elite

It shows what features this interface has attached to.

Here is example if you attach QoS, IKE and LLDP at the same time.

 

Raido_Rattameister_0-1705126070682.png

 

 

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011

Thanks for the response. I understand what the column is for but what I don't understand is why there is only 1 Ike gateway showing as attached when we have almost 100. If I hover over the Ike gateway, the name displayed isn't even for the gateway at the device. It's for one of the remote sites, not the Gateway assigned at the interface.

 

Thanks

Cyber Elite
Cyber Elite

@KenKrause,

It's just parsing the configuration and displaying the last entry utilizing that interface. I honestly couldn't tell you why PAN feels the need to display the entry utilizing the interface at all, but that's just what they've decided to do. Regardless of how many gateways you have, you'll only ever see a single entry.

The same behavior is displayed for any other feature you have assigned to the interface. You'll see the exact same behavior for GlobalProtect Portal/Gateway as well, where regardless of how many you have assigned to the interface it'll only show a single entry in the GUI under interfaces.

L1 Bithead

Thanks for the clarification. I was beginning to think I had a misconfiguration or some other issue.

 

Thanks

  • 1 accepted solution
  • 556 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!