Show Commands to Verify L3 Sub-interface Configuration

[cpatte7372]

Hello Community,

I have configured L3 Sub-Interface on a Palo Alto firewall in a virtual environment. Can someone please let me know if there are any show commands to verify that the configuration is working successfully?

Thank you

Carlton 

[clyde.franklin]

Shoudl be show interface adn interface#/#.# Build int lab to confirm

admin@PALO-TIA-03P(active-primary)> show interface ethernet1/3.10

--------------------------------------------------------------------------------
Name: ethernet1/3.10, ID: 1035, 802.1q tag: 10
Operation mode: layer3
Interface IP address: 2.2.2.2/32
Interface management profile: N/A
Service configured:
Zone: N/A, virtual system: vsys1
Adjust TCP MSS: no
--------------

[cpatte7372]

Hi Clyde,

Thanks for getting back to me.

Aren't there any other show commands than the one you provided below?

Regards

[kiwi]

This info is also included in the command Clyde provided but doing 'show counter interface ethernet1/3.10' shows logical interface numbers ... any number other than 0 should indicate traffic going through the logical interface.  For physical counters you should use the physical interface.

admin@PA-VM> show counter interface ethernet1/3.10

Interface: ethernet1/3.10

--------------------------------------------------------------------------------

Logical interface counters read from CPU:

--------------------------------------------------------------------------------

bytes received                           25406

bytes transmitted                        0

packets received                         285

packets transmitted                      0

receive errors                           0

packets dropped                          236

packets dropped by flow state check      0

forwarding errors                        0

no route                                 236

arp not found                            0

neighbor not found                       0

neighbor info pending                    0

mac not found                            0

packets routed to different zone         0

land attacks                             0

ping-of-death attacks                    0

teardrop attacks                         0

ip spoof attacks                         0

mac spoof attacks                        0

ICMP fragment                            0

layer2 encapsulated packets              0

layer2 decapsulated packets              0

--------------------------------------------------------------------------------

Hope it helps.

-KiWi.

[cpatte7372]

Thanks KiWi