WOL and two subinterfaces - problem

[_slv_]

Hello

I have two subinterfaces ethernet1/4.10 (192.168.1.0/24) and ethernet 1/4.20 (192.168.20.0/24) in the same security zone.

What I need to set up to allow to wake up computers using Wake On Lan function on 192.168.20.0/24 from ie. 192.168.1.100 ?

With regards

Slawek

[Raido_Rattameister]

This thread might give you some ideas.

https://live.paloaltonetworks.com/t5/General-Topics/How-to-configure-WOL-forwarding-through-a-VPN-tu...

[_slv_]

Hello

I sow this topic before I created my...

I ask you for more detailed solution - best idea - from working case.

I hope that someone is using WOL and couple of interfaces.

With regards

Slawek

[_slv_]

Hello

None is using WoL?

[rmfalconer]

The thread that Raido linked shows a working method to get WOL to function across interfaces. Two users confirmed that they have it working. 

On interface 1/4.10, add the necessary broadcast info in the ARP Entries section and it should work. Have you tried this and it didn't work?

[_slv_]

Hello

I'm on business trip and I can't verify it (I tryed to WoL VMWare VM aithout success even with vmx network interface).

I assume that I need to add  192.168.20.255 with ffffffffffff on 192.168.1.0/24 interface on Advanced tab in ARP entry section. Do I'm right?

Regards

Slawek

[rmfalconer]

It should be 192.168.1.255 with ffffffffffff  on the arp entry section.

If the PA works like the Juniper, it assumes that .255 is a valid address and the PA sends out an ARP request for that address. Since it's not a valid address on a /24 network, you need to map the broadcast mac address to that IP address on the destination subnet.

[_slv_]

@rmfalconerCould You be so kind and explain me hwo to do:

"you need to map the broadcast mac address to that IP address on the destination subnet."

Regards

Slawek

[rmfalconer]

The mapping is what you do on the Interface-Advanced-ARP Entries tab. It's just a static entry for IP to MAC address.

[_slv_]

@rmfalconerTHX

I will test it on monday.

[_slv_ · Accepted solution]

Hello

Correct solution is:

 Add  192.168.20.255 with ffffffffffff on 192.168.20.0/24 interface ethernet 1/4.20 on Advanced tab in ARP entry section.

Next I'm able to wake up from workstation with 192.168.1.210 computer that has IP 192.168.20.17 using

"mc-wol.exe 00:24:e8:23:97:31 /a 192.168.20.255" 

Regards

Slawek