Flexible vCPU VM Firewall interfaces are down

[Branislav_Cahoj]

Hi,
I have a problem with bringing up interfaces on a VM firewall running with this configuration:

vm-license: VM-SERIES-2

vm-cap-tier: T1-5GB

vm-cpu-count: 2

vm-memory: 5061728

vm-mode: VMware ESXi

sw-version: 11.1.4-h13

show interface hardware

total configured hardware interfaces: 2

name                    id    speed/duplex/state            mac address      

--------------------------------------------------------------------------------

ethernet1/1             16    ukn/ukn/down((autoneg))       00:50:56:90:b4:e1

ethernet1/3             18    ukn/ukn/down((autoneg))       00:50:56:90:82:a3

When I changed vCPU 4 Memory 8GB interfaces are up and running.

Is it software bug or some problem with running on ESX platform?

If sombody has a working setup vCPU2 and Memory 6GB (or less) what sw-version do you use?

Thanks

[CosminM · Accepted solution]

Hello @Branislav_Cahoj 

I recommend to make a fresh deployment with Pan-OS 11.1.2-h13 or any other sw version prior to 11.1.3. Starting with version 11.1.3 for ESXI deployment, the base image has VM hardware compatibility version 15. All previous VM firewall based images for ESXi has VM hardware compatibility version 10.

[G.Dumitru127520]

Hi Branislav_Cahoj,

I've tried to deploy the same version of pa-vm 11.1.4-h13  on host esxi 7.0.3, 203283, default settings (2vcpu, 5.5GB Ram) with no problems, but deployed on host esxi 8.0.3, 2441450 and the issue is as you describe it. So, it's weird.

In my lab (host esxi 8.0.3) to work with 2vcpu and 5.5Gb, I deployed PA-VM-ESX-11.1.0 and upgraded it to the version 11.2.4-h4 (with VM hardware compatibility version 10).

Thx,

GD

[Branislav_Cahoj]

Thanks @CosminM, it works for me to deply fresh software version 11.1.2

vm-license: VM-SERIES-2
vm-cap-tier: T1-5.5GB
vm-cpu-count: 2
vm-memory: 5577872
sw-version: 11.1.2

Hypervisor: VMware ESXi, 8.0.3, 24585383

.

I tried to update to version 11.1.4 that ended up with interfaces again in DOWN state.

I also tied the setup 3vCPU and 8GB of memory with version 11.1.4 and interfaces are UP

The goal was to find the minimal configuration to save credits.

[Branislav_Cahoj]

Update: I tried to update to version 11.1.4 that ended up with interfaces in UP state.