Traffic steering to wrong sub interface

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Traffic steering to wrong sub interface

L0 Member

Tearing my hair out here so any help appreciated.

This is a VM firewall, VM-300 ver 8.0.3-h4.


I have created new subinterfaces for three VLANs, one of which is a guest VLAN (111) which has its own vSwitch, port group, sub-interface and zone. However, all traffic seems to be steering to the same interface (eth1/2.15). Since eth1/2 was the original interface before I created the new subinterfaces, I'm wondering if it's holding onto it for some reason.

The tagging all looks correct all the way through the chain, from the switch to the PA network adapters, so I'm at a loss as to why it's doing this.

Firewall 00 - Logs.PNGFirewall 01 - Policies.PNGFirewall 02 - Interfaces.PNGFirewall 03 - Objects.PNGFirewall 04 - Zones.PNGFirewall Topology.PNG


Cyber Elite
Cyber Elite

These are all source interface 1/2.15 so it's on the ingress. It looks like your vswitch is tagging everything as vlan15

Tom Piens
PANgurus - SASE and Strata specialist; (co)managed services, VAR and consultancy

After extensive troubleshooting, the penny dropped and I have seen the error of my ways. I was pinging on a core switch & sourcings from the SVI. Since the switch uses its control plane routing table, all traffic was going to the default route .. which is on the 1/2.15 interface. By testing from the 'outside' and using the proper default gateway (on the firewall), everything works just as it should. Schoolboy error.


Thanks for taking the trouble to reply though.


Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!