- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
04-07-2023 07:41 PM
Hi Initial configuration is like the below. why we cannot ping 192.168.8.100 ? i would like to allow the firewall to be ping and accessed via https. Maybe it need to add some command . Anyone can provide some suggestion? Thank you
admin@PA-VM> configure
admin@PA-VM# delete deviceconfig system type dhcp-client
admin@PA-VM #set deviceconfig system type static
admin@PA-VM# set deviceconfig system ip-address 192.168.8.100 netmask 255.255.255.0
admin@PA-VM# commit
04-07-2023 08:13 PM
what is output of
show interface management
04-08-2023 08:36 AM
Hi @DavidyPalo ,
The management interface allows ping and HTTPS by default. I did not see a default gateway configuration (set deviceconfig system default-gateway x.x.x.x). You will need that if you are trying to connect from a subnet other than 192.168.8.0/24.
Thanks,
Tom
04-08-2023 11:53 AM
Laptop is directly connected to Palo or is there switch in between?
Can you connect directly and test then?
You can also check "arp -a" from your laptop to see if Palo's mgmt mac address resolves.
Or perform ping from Palo side "ping host 192.168.1.x" and "show arp management"
04-07-2023 08:13 PM
what is output of
show interface management
04-08-2023 08:36 AM
Hi @DavidyPalo ,
The management interface allows ping and HTTPS by default. I did not see a default gateway configuration (set deviceconfig system default-gateway x.x.x.x). You will need that if you are trying to connect from a subnet other than 192.168.8.0/24.
Thanks,
Tom
04-08-2023 11:32 AM - edited 04-08-2023 11:33 AM
Thanks all for your reply! its in the same subnet. also i added default gateway. but i still cannot ping 192.168.1.73 from my pc
below is screenshot
04-08-2023 11:53 AM
Laptop is directly connected to Palo or is there switch in between?
Can you connect directly and test then?
You can also check "arp -a" from your laptop to see if Palo's mgmt mac address resolves.
Or perform ping from Palo side "ping host 192.168.1.x" and "show arp management"
04-08-2023 12:06 PM - edited 04-08-2023 12:07 PM
Palo alto is installed as vm on eve
PC and Palo alto management interface can see each other via arp, but why its interface is eth0? please see the below
04-09-2023 10:45 PM
Hello,
In any case did you check interface management profile from FW GUI.
04-11-2023 08:00 AM
Not sure about eve but in VMware nic orderis following.
vNic1 - mgmt
vNic2 - ethernet1/1
vNic3 - ethernet1/2
etc
So first virtual network adapter is used for mgmt port in Palo.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!