Ping management interface

[DavidyPalo]

Hi Initial configuration is like the below. why we cannot ping 192.168.8.100 ? i would like to allow the firewall to be ping and accessed via https. Maybe it need to add some command . Anyone can provide some suggestion? Thank you

admin@PA-VM> configure
admin@PA-VM# delete deviceconfig system type dhcp-client
admin@PA-VM #set deviceconfig system type static
admin@PA-VM# set deviceconfig system ip-address 192.168.8.100 netmask 255.255.255.0
admin@PA-VM# commit

[Raido_Rattameister · Accepted solution]

what is output of 

show interface management

[TomYoung · Accepted solution]

Hi @DavidyPalo ,

The management interface allows ping and HTTPS by default.  I did not see a default gateway configuration (set deviceconfig system default-gateway x.x.x.x).  You will need that if you are trying to connect from a subnet other than 192.168.8.0/24.

Thanks,

Tom

[DavidyPalo]

Thanks all for your reply! its in the same subnet. also i added default gateway. but i still cannot ping 192.168.1.73 from my pc

below is screenshot

[Raido_Rattameister · Accepted solution]

Laptop is directly connected to Palo or is there switch in between?

Can you connect directly and test then?

You can also check "arp -a" from your laptop to see if Palo's mgmt mac address resolves.

Or perform ping from Palo side "ping host 192.168.1.x" and "show arp management"

[DavidyPalo]

Palo alto is installed as vm on eve

PC and Palo alto management interface can see each other via arp, but why its interface is eth0? please see the below

[upelister]

Hello,

In any case did you check interface management profile from FW GUI.

[Raido_Rattameister]

Not sure about eve but in VMware nic orderis following.

vNic1 - mgmt

vNic2 - ethernet1/1

vNic3 - ethernet1/2

etc

So first virtual network adapter is used for mgmt port in Palo.