PING from Firewall GUI

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Palo Alto Networks Approved
Palo Alto Networks Approved
Community Expert Verified
Community Expert Verified

PING from Firewall GUI

L0 Member

Hi All,

 

I have a basic doubt.

Isit possible to ping from firewall GUI ?

If not from Panaroma CLI, isit possible to connect firwall ( to test the ping from firewall to host )

 

Reason : To check the network latency from fireawall.

 

Thanks

KM

2 accepted solutions

Accepted Solutions

Cyber Elite
Cyber Elite

hi @karthik2019

 

No, this can not be done from the GUI

you can from the CLI from 2 different 'planes'

 

>ping host x.x.x.x

will ping from the management interface

>ping source y.y.y.y host x.x.x.x

will ping from the dataplane interface that owns ip y.y.y.y 

 

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

View solution in original post

Had same error- "bind: Cannot assign requested address" on firewall when sourcing ping from ethernet 1/5 (not Panorama).  Found that after we had done a load saved config snapshot to restore a config, one of the physical interfaces had the "untagged subinterface" checkbox checked.  We undid this checkbox and everything was back to normal.  Hope this can help someone else.

View solution in original post

6 REPLIES 6

Cyber Elite
Cyber Elite

hi @karthik2019

 

No, this can not be done from the GUI

you can from the CLI from 2 different 'planes'

 

>ping host x.x.x.x

will ping from the management interface

>ping source y.y.y.y host x.x.x.x

will ping from the dataplane interface that owns ip y.y.y.y 

 

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

Thanks for your reply ..

I did tried it .

 

Panorama>ping source ( firewall management ip ) host ( host ip ) 

 

I am getting below error :

 

bind: Cannot assign requested address

 

Thanks

KM

The ping command only works from the local device, panorama does not have dataplane interfaces so you can't add source from panorama either

To be able to run the ping from a firewall, you need to connect to the firewalls' CLI

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

Thanks for your reply, much appreciated.

 

yes i get it , that is my catch .. I have issue login firewall CLI so, trying all steps to use panorama CLI to get some ICMP reply for firewall. 

 

Thanks again for confirmatiom.

 

KM 

 

Had same error- "bind: Cannot assign requested address" on firewall when sourcing ping from ethernet 1/5 (not Panorama).  Found that after we had done a load saved config snapshot to restore a config, one of the physical interfaces had the "untagged subinterface" checkbox checked.  We undid this checkbox and everything was back to normal.  Hope this can help someone else.

L0 Member

From the GUI - Device > Troubleshooting >Test configuration > Select Test [Ping from the dropdown] Enter your target in the Host box. Click Execute. In the test results click "PING <the host you entered before you clicked execute>" See the Results.

 

Ping from Palo Alto.jpg

 

Work hard and play harder
  • 2 accepted solutions
  • 85486 Views
  • 6 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!