Palo Alto networks PA-500 with PowerDesine 3001 POE modem

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Palo Alto networks PA-500 with PowerDesine 3001 POE modem

L2 Linker

Hello,

 

I like to replace the cisco ASA 5510 with PA-500 in the company . I do all the necessary configuration in the PA-500 but always it still a problem of internet connection. I configure the PA-500 with the same specification configured in the Cisco ASA5510 ( MTU size, the Vrouter...) but always I still have the same problem. 

In the guide of PA-500 , I found this line :  "Connecting a PoE enabled port to the firewall is not recommended because the system does not support the PoE operating mode."

There is any problem of a compatibility between PA-500 and PowerDesine 3001 modem? 

Any recommandation please can help me !

 

Thank you very much 

3 REPLIES 3

L7 Applicator

The P500 does not send or setup to receive POE.  But you can certainly connect an ethernet port to the ethernet side of a POE injector.

 

I'm pretty sure POE is not th reason your configuration is failing.

 

What are the specific issues?  

 

Are you saying users cannot browse the internet when installed?

 

If that is the case the issue is likely in either the NAT or security rules.

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center

Or your isp switch has long arp cache and it thinks your public ip is behind other mac address.

When you set it up next time try to ping default gateway isp gave you from palo external interface.

ping source 1.1.1.1 host 2.2.2.2

Replace 1.1.1.1 with your public ip and 2.2.2.2 with your default gateway.

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011

Hello, 

 

It's ok , thank you very much for all your helps. The issue solved by the add of the MAC address of the WAN interface of PAN to the basic configuration of the PowerDesign modem. 

It's necessary to add a MAC address of WAN interface to the basic configuration of the modem. 

 

Thank you very much 🙂

 

  • 2476 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!