Starting from PAN-OS 11.0 version, is the only interface link duplex set to auto?

[KyungjunCHOE]

Dear Team,

I noticed something unusual during testing.

Starting from 11.0, the only option for interface link duplex setting is 'auto'.

I've checked the changes and restrictions in 11.0, but there are no explicit details about them.

Is this by design? Could this be a bug?

I checked both GUI and CLI, but couldn't configure it.

The OS I tested is below.

- PAN-OS 9.1

- PAN-OS 10.2

- PAN-OS 11.0

If anyone knows anything about this, I would appreciate it if you could let me know.

[BPry]

@KyungjunCHOE,

I can't find any information in the release notes stating that it's intentional, but auto is the only option that the firewall is capable of taking even if you attempt to set it in the CLI or load it directly into the configuration file. Can't say that I've found myself needing to set the duplex on modern devices, but you might want to reach out to TAC to confirm it's actual intended behavior.

[CosminM]

@KyungjunCHOE 

There are several PA-series were on hardware reference manual it's mentioned for ethernet ports the following statement:

"The link speed and link duplex are auto-negotiate only."

This is just an example: https://docs.paloaltonetworks.com/hardware/pa-1400-hardware-reference/pa-1400-series-overview/front-... 

[KyungjunCHOE]

@BPry @CosminM 

Thank you for your support

First of all, I didn't know there were hardware platforms that could only set 'auto'.

Thank you for sharing this important information.

But I think this is more of a bug as I am experiencing the symptoms despite it being a supported hardware platform.

Therefore, I will open a CASE and provide feedback on the results.

[Waly]

Hello @KyungjunCHOE,

Any luck to have a reply from TAC team on this? as I am facing it on a PA 440 series on 11.1.4-h1 pan-os version.

Did they mention anything about 11.0 and 11.1 on this matter?