Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

Ping management interface

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Ping management interface

L2 Linker

Hi Initial configuration is like the below. why we cannot ping 192.168.8.100 ? i would like to allow the firewall to be ping and accessed via https. Maybe it need to add some command . Anyone can provide some suggestion? Thank you

 

admin@PA-VM> configure
admin@PA-VM# delete deviceconfig system type dhcp-client
admin@PA-VM #set deviceconfig system type static
admin@PA-VM# set deviceconfig system ip-address 192.168.8.100 netmask 255.255.255.0
admin@PA-VM# commit

3 accepted solutions

Accepted Solutions

Cyber Elite
Cyber Elite

what is output of 

show interface management

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011

View solution in original post

Cyber Elite
Cyber Elite

Hi @DavidyPalo ,

 

The management interface allows ping and HTTPS by default.  I did not see a default gateway configuration (set deviceconfig system default-gateway x.x.x.x).  You will need that if you are trying to connect from a subnet other than 192.168.8.0/24.

 

Thanks,

 

Tom

Help the community: Like helpful comments and mark solutions.

View solution in original post

Cyber Elite
Cyber Elite

Laptop is directly connected to Palo or is there switch in between?

Can you connect directly and test then?

You can also check "arp -a" from your laptop to see if Palo's mgmt mac address resolves.

Or perform ping from Palo side "ping host 192.168.1.x" and "show arp management"

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011

View solution in original post

7 REPLIES 7

Cyber Elite
Cyber Elite

what is output of 

show interface management

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011

Cyber Elite
Cyber Elite

Hi @DavidyPalo ,

 

The management interface allows ping and HTTPS by default.  I did not see a default gateway configuration (set deviceconfig system default-gateway x.x.x.x).  You will need that if you are trying to connect from a subnet other than 192.168.8.0/24.

 

Thanks,

 

Tom

Help the community: Like helpful comments and mark solutions.

L2 Linker

Thanks all for your reply! its in the same subnet. also i added default gateway. but i still cannot ping 192.168.1.73 from my pc

below is screenshot

 

DavidyPalo_0-1680978729041.png

 

 

Cyber Elite
Cyber Elite

Laptop is directly connected to Palo or is there switch in between?

Can you connect directly and test then?

You can also check "arp -a" from your laptop to see if Palo's mgmt mac address resolves.

Or perform ping from Palo side "ping host 192.168.1.x" and "show arp management"

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011

L2 Linker

Palo alto is installed as vm on eve

PC and Palo alto management interface can see each other via arp, but why its interface is eth0? please see the below

 

 

DavidyPalo_0-1680980629471.png

 

L3 Networker

Hello,

 

In any case did you check interface management profile from FW GUI.

UP

Cyber Elite
Cyber Elite

Not sure about eve but in VMware nic orderis following.

vNic1 - mgmt

vNic2 - ethernet1/1

vNic3 - ethernet1/2

etc

 

So first virtual network adapter is used for mgmt port in Palo.

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011
  • 3 accepted solutions
  • 3989 Views
  • 7 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!