Knowledge sharing: Palo Alto troubleshooting falty or not supported SFP and SFP stopped working after upgrade

[nikoolayy1]

Hello to All,

I wanted to share what I know with thee comunity. First in many cases for faulty and not supported SFP the option "show system state filter sys.sx.px.phy" is used (for more info https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaMCAS ). If you don't see the manufacturer information check the article https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000boFQCAY , if you see that the SFP is supported then it is probably faulty. Another things is to be aware that after an upgrade a supported SFP may become unsupported as for example the SFP was supported till 2016 and after upgrade from 8.1.x to another version like 9.0.x or 9.1.x, the SFP is no longer under support and it could stop working. In my case the SFP stopped working but even with "show system state" the manufacturer data was OK but after checking the supported SFP list I was that it was supported till 2016.

For example FTLX8571D3BCL is no longer available as supported from 2016, so and upgrade from 8.1 may cause an impact in some cases.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRACA0

New in version 10 are the "show transceiver" commands that can show if there is an issue with the power of the signal and so on.

Before only the "show system state filter xxx" ( https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaMCAS ) was used to check issues with SFP but in version 10 the show transceiver is here and this is great

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/monitoring/monitor-transceivers.html

[kiwi]

@nikoolayy1 ,

Thanks for sharing your experience !

Much appreciated !

Cheers,

-Kiwi.