Link-change Events

[Jack_Howells]

Hi guys,

What is the meaning of these "link-change" events, as shown below.

Kind regards

Jack

[TranceforLife]

Hi,

Looks like ports went down/up. Flapping possible

You can check for every port status:

> show log system object equal ethernet1/1

Thx,

Myky

[BPry]

Link change is telling you that something changed in the link that the Palo Alto noticed. I'll include a screenshot of mine but usually these are occompanied by a Down message unless it's your first time plugging that port into the device. 

Looking at it I would actually think to look at your speed and duplex settings on the equipment that these ports are plugged into; it looks like your switch may be having a hard time auto-negotiating that information. 

[Jack_Howells]

Thanks for the replies guys.

We keep seeing errors like these below when issuing following command: less mp-log l2ctrld.log

Maybe this could also be related to a faulty speed/duplex detection?

However, we don’t see any errors on the interfaces themselves, also not on the connected switches.

2016-11-29 21:52:04.685 +0100 Got port 33 event, link 1, speed 3, duplex 2

2016-11-29 21:52:04.685 +0100 port 33 is full duplex. Enable lacp

2016-11-29 22:22:05.204 +0100 Error:  pan_l2ctrld_read_sysd_port_status(pan_l2ctrld_sysd.c:140): pan_ifhw_link_portstate_to_state for port 30 failed. set to 1Gb/s-full

2016-11-29 22:22:05.257 +0100 Error:  pan_l2ctrld_read_sysd_port_status(pan_l2ctrld_sysd.c:140): pan_ifhw_link_portstate_to_state for port 31 failed. set to 1Gb/s-full

2016-11-29 22:22:05.316 +0100 Error:  pan_l2ctrld_read_sysd_port_status(pan_l2ctrld_sysd.c:140): pan_ifhw_link_portstate_to_state for port 30 failed. set to 1Gb/s-full

2016-11-29 22:22:05.367 +0100 Error:  pan_l2ctrld_read_sysd_port_status(pan_l2ctrld_sysd.c:140): pan_ifhw_link_portstate_to_state for port 32 failed. set to 1Gb/s-full

2016-11-29 22:22:05.422 +0100 Error:  pan_l2ctrld_read_sysd_port_status(pan_l2ctrld_sysd.c:140): pan_ifhw_link_portstate_to_state for port 31 failed. set to 1Gb/s-full

The link-change events have been there since we configured everything, but they haven't been an issue up to now. There are switches upstream of the Palo before a call server we have in place also.

Kind regards

Jack