I am trying to get my firewall on the network for the first time.

Showing results for 
Show  only  | Search instead for 
Did you mean: 

I am trying to get my firewall on the network for the first time.

L1 Bithead

So far I cant ping the firewall from the network and I can't ping the gateway or any pcs from the firewall.  I have checked the arp table and I don't see any mac addresses there, so now I am starting to get concerned about the viability of this firewall.  However my experience with paloalto firewalls started with this device.  However my networking experience did not.  I am running on 6.01.  So obviously I would like to update the firewall so I can work with a more current version of PANOS.  Finding documentation for 6.01 has not been very fruitful.  


Cyber Elite
Cyber Elite


You may need to do a factory reset on the FW, if you think the FW is the cause.

You should be plugged into the mgmt port (which will NOT show its mac address in the ARP table.  ARP is for the data plane ports).

Think of the mgmt port as nothing more than a linux computer.  It should have a IP/mask/default gw that is local to your network.

I would plug my computer directly into the Mgmt port of the FW, and eliminate any network issues.


Can you console into the box, vs ssh or web page to it?  From console you should try to ping out to your computer.



If the FW has a support contract on it, you may be able get it upgraded.   Without support, how would you plan to upgrade?



Help the community: Like helpful comments and mark solutions

I am plugged into the management port and I started this process with a factory reset.

Here is my deviceconfig


show deviceconfig
deviceconfig {
system {
update-server updates.paloaltonetworks.com;
update-schedule {
threats {
recurring {
weekly {
day-of-week wednesday;
at 01:02;
action download-only;
timezone US/Pacific;
service {
disable-telnet yes;
disable-http yes;
hostname PA-3020;
dns-setting {
servers {
setting {
config {
rematch yes;
management {
hostname-type-in-syslog FQDN;



If there is another show command you would like to see let me know. 



Also make sure Under Management interface Ping option is checked.

Also you can connect your PC to Management Interface of firewall and assign it IP in same subnet range and same gateway.

Then you can test whether you can ping the gateway from your PC or not?


Also is that gateway reachable from your network?



Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!