MAC Address Table learned by Palo Alto

Showing results for 
Show  only  | Search instead for 
Did you mean: 

MAC Address Table learned by Palo Alto

L0 Member

Hi ,


Is there a way we can view the MAC addresses learned by Palo Alto, I am not talking about ARP. 


So in Juniper/Cisco Layer 2 Switches you can see what mac addresses are learned on the mac address table Can we do that same in Palo Alto?




Cyber Elite
Cyber Elite

for layer2 interfaces the command is 

> show mac all

for layer3 interfaces

> show arp all



Tom Piens
PANgurus - (co)managed services and consultancy

L7 Applicator

Why arp command does not suit?


show arp all

show arp ethernet1/1

Enterprise Architect, Security @ Cloud Carib Ltd

Because arp is layer3, does not work for L2, have that problem on a mirror port:


I have the Problem i need to verify the remote mac-address of the Linuxdevice connected to the decrypt-mirror-port on the PA and "show mac all" does only show vlans but not ethernet1/7 which is the decrypt-mirror-port.


Is there any posibility to see the remote mac address on a decrypt/mirror port on the PA?


Thanks in Advance,

BR Adrian


Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!