I'm starting my PCSNA journey and I've been going through CBT Nuggets and have setup the CBT Nugget lab.
My 1/6 interface 18.104.22.168/24 cannot ping my vyos router ip at 22.214.171.124/24 and vice versa.
I have allowed ping via the interface management on interface 1/6 which is associated to the outside zone.
I have a policy allowing traffic from the inside to the outside with no restriction as well as from the outside to the inside.
Both interfaces for the router and the pa-vm are in the same vwnet.
My default route for my pa-vm points to 126.96.36.199
I have tested the vyos router with a windows 10 vm and I'm able to ping from each device within the 23.1.2.x network.
I'm not sure what else to look at in order to get the pings to work on the 188.8.131.52/24 network and eventually my network traffic.
I'm missing something to allow communication between the vyos router and the pa-vm
On to the troubleshoot step that identifies 99% of the issues, checking global counters! Try this and see if it throws something to specifically identify whats stopping it.
Welcome to the Palo Alto world! When you are performing your ping, are you selecting the external IP of the interface as the source? the PAN will use the management interface by default if nothing was specified. Check the logs to see where the traffic is getting blocked etc.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!