VM series firewalls and interfaces

[aldo-escobar]

Howdy all

I have deployed 2 VM series firewalls in VMware workstation pro but I can't get their dataplane interfaces to ping each other. I'm sure this has to do with how to configure the network adapters. 

I have no issues accessing the GUIs/ Management interfaces and they can ping each other as these interfaces are bridged in Vmware workstation. 

dataplane interfaces should be able to ping each other, as that is the purpose of LAN segment, to put them on an isolated network so the VMs can see each other on the network. I want to do this that I can play with routing only between these 2 VM firewalls. 

so from eth1/1 PAVM1 to eth1/1 PAVM2, 

admin@PA-VM> ping source 99.99.99.1 host 99.99.99.2
PING 99.99.99.2 (99.99.99.2) from 99.99.99.1 : 56(84) bytes of data.
^C
--- 99.99.99.2 ping statistics ---
5 packets transmitted, 0 received, 100% packet loss, time 128ms

pavm1

Network Adapter 1 (eth0/management interface) is Bridged

Network Adapter 2 (eth1/dataplane interface) is on LAN segment 1

pavm2

Network Adapter 1 (eth0/management interface) is Bridged

Network Adapter 2 (eth1/dataplane interface) is on LAN segment 1

[TomYoung]

Hi @aldo-escobar ,

Have you attached an interface management profile to the interfaces that allow ping?

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-networking-admin/configure-interfaces/use-inter...

Thanks,

Tom

[aldo-escobar]

Hello Tom,

Management profiles are attached to interfaces. 

[aldo-escobar · Accepted solution]

Hello Tom,

I'm such a goofball, needed a break and review my settings. Turns out on one of the interfaces I did not attach a zone and a virtual router. This was missing. I configured the zone and virtual router, it now works. I could've swore I already did that part. 

Thank You!