How ARP request initiated from Palo Alto sub interface

Showing results for 
Show  only  | Search instead for 
Did you mean: 

How ARP request initiated from Palo Alto sub interface

L4 Transporter

I am having some issues new ISP. I have assigned my sub interface with /29 range of IP given by my ISP.

I have added staic route towards gateway of ISP with exit interface( sub interface) specified in Palo Alto Virtual router.

Can some tell who will initaite ARP between these interface( its same subnet)

When I take the packet capture, only ISP sends the ARP request and Palo Alto interface reply back( arp reply). In Packet capture, I can not see any ARP request initaited from Palo Alto. Its just sending reply. ( i think i got  answer this, in packet capture arp requests from PA wont be captured)


The problem is after 30 min of arp cacahe in Palo , ARP is not updated in Palo.

Why Sub interface of Palo Alto is not sedning ARP request.


ISP only send ARP request in the begnning, after that it does not send the ARP request to Palo Alto Interface IP again. However it sends to other IPs in the /29 Subnet. 


Firewalldog dot com

Cyber Elite
Cyber Elite


You probably want to open a support ticket with TAC for this so that they can actually look over your entire configuration; because there are some weird instances where NAT policies can actually interfere with this. 

When the 30 minutes is up can you trigger a GARP on the subinterface and see if that gets things working again? It seems kind of odd that you would see things stop working after 30 minutes though, unless your ISP is refreshing your public IP space every 30 minutes which would be rather stupid you should have the same ARP entries and the table wouldn't even need to refresh. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!