08-25-2011 12:22 PM
Does anyone know if PANOS 4.0 responds to ARP requests for the IP used in HA path-monitoring?
I know that path-monitor sends pings or something similar to the devices it is monitoring. When you setup path-monitoring, you specific what source IP should be used for the pings. I also know that in virtual-wire, the monitored devices have to be on the same subnet as the source IP.
What I've got is a device that I'm using as one of the monitor points insists on doing an ARP request back for the source IP of the path-monitor ping, and it appears that the PA does not respond to ARP requests for the path-monitor IP. This leads to a path-monitor down status for that monitored device. However, when I hardcode the ARP entry for the PA source IP on the monitored device, the responses come through and path-monitor reports that host as up.
08-26-2011 05:09 AM
I'm using PA-5050s and the virt-wire connection is configured on eth1/3 and eth1/4. PANOS version is 4.0.4.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!