PA default interface state

[corporatenw]

Hello community 🙂

I've been searching but couldn't find an answer so:

What is the default interface state (out of the box firewall)? Is it forwarding L2 packets? Can I create a L2 loop by connecting two interfaces between FW & a switch?

[PavelK]

Thank you for posting question @corporatenw 

All firewalls shipped from the factory have two Ethernet ports (ethernet1/1 and ethernet1/2 ) preconfigured as virtual wire interfaces (default-vwire), and these interfaces allow all untagged traffic. The reference is here in the documentation: https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/networking/configure-interfaces/virtual-w...

The rest of the data plane interfaces are using interface type: Tap. With default configuration you should not cause any loop.

Kind Regards

Pavel