Palo Alto networks PA-500 with PowerDesine 3001 POE modem

[RCHAIBI]

Hello,

I like to replace the cisco ASA 5510 with PA-500 in the company . I do all the necessary configuration in the PA-500 but always it still a problem of internet connection. I configure the PA-500 with the same specification configured in the Cisco ASA5510 ( MTU size, the Vrouter...) but always I still have the same problem. 

In the guide of PA-500 , I found this line :  "Connecting a PoE enabled port to the firewall is not recommended because the system does not support the PoE operating mode."

There is any problem of a compatibility between PA-500 and PowerDesine 3001 modem? 

Any recommandation please can help me !

Thank you very much 

[pulukas]

The P500 does not send or setup to receive POE.  But you can certainly connect an ethernet port to the ethernet side of a POE injector.

I'm pretty sure POE is not th reason your configuration is failing.

What are the specific issues?  

Are you saying users cannot browse the internet when installed?

If that is the case the issue is likely in either the NAT or security rules.

[Raido_Rattameister]

Or your isp switch has long arp cache and it thinks your public ip is behind other mac address.

When you set it up next time try to ping default gateway isp gave you from palo external interface.

ping source 1.1.1.1 host 2.2.2.2

Replace 1.1.1.1 with your public ip and 2.2.2.2 with your default gateway.

[RCHAIBI]

Hello, 

It's ok , thank you very much for all your helps. The issue solved by the add of the MAC address of the WAN interface of PAN to the basic configuration of the PowerDesign modem. 

It's necessary to add a MAC address of WAN interface to the basic configuration of the modem. 

Thank you very much 🙂