About RCHAIBI

RCHAIBI · ‎10-22-2015

Hello, I'm sorry i do a mistake when i wrote the table of the NAT rules. You will find in the attachement the right screen shot . The static NAT that i used is a bidirectional NAT. I add also a security rules to access to the email server (10.10.10.2) . The problem that i can send an email but i can't receive any email. I think that i do a mistake in the security rules. Could you please help me to determinate the mistake in my configuration. Thank you very much for all helps

RCHAIBI · ‎10-20-2015

Hello, In our office we have two servers in a DMZ zone (10.10.10.3 and 10.10.10.4). In the PA-500 I created a DMZ zone that's related to a vlan in the switch . This switch i related to the serves (10.10.10.3 and 10.10.10.4). The servers are in DMZ zone so I configure the NAT rules with static NAT and I open the necessary ports. But without any results. I think that I shoudn't configure a destinaion NAT in this cas becous the servers ar in DMZ zone and ot in a LAN zone. You wil find in the attchment the screenshot about the existing configuration of PAN. I will be appreciated for all helps ! Thank you very much 🙂

RCHAIBI · ‎10-20-2015

Hello, It's ok , thank you very much for all your helps. The issue solved by the add of the MAC address of the WAN interface of PAN to the basic configuration of the PowerDesign modem. It's necessary to add a MAC address of WAN interface to the basic configuration of the modem. Thank you very much 🙂

RCHAIBI · ‎10-19-2015

So this case is only possible with te configuration of VLANS in PAN or in the switch ? I found this article talk about the configuration of VLANs interfce in PAN : https://live.paloaltonetworks.com/t5/Configuration-Articles/Setting-Up-the-PA-200-for-Home-and-Small-Office/tac-p/61841/highlight/true So if I like to confgure a VLANs in PAN ,I should do as mentioned n the article : config from L3 to L2 interface 1/1: WAN : L3 interface 1/2: LAN (interface VLAN 192 with address 192.168.1.0/24) interface 1/3: Server zone with address (interfac VLAN 10 : 10.200.1.0/24) Then I will relate the inter1/2 and iner1/3 to a separate switch . I will add then a access and Vroute in PAN that's te solution??

RCHAIBI · ‎10-19-2015

The eth 1/2 of PAN is configuredwith LAN zone and this interface is connected to the switch . Yes the servers and the clients PC are connected to the same swith . I need torestrict the access to of the uses to a servers that's located in the same subnet 192.168.1.0/24. It's posibleto do this?

RCHAIBI · ‎10-19-2015

Hello, I need to restrict the access to a critical server in our company i the LAN zone . I add a security rule that restrict for exemple the address 192.18.1.25 to access to database server tht has the address 192.168.1.20 . I add a security rule from LAN to LAN with this address but the rstrection do't work! How can i do this restriction ? I will be appreciated for all helps 🙂

RCHAIBI · ‎10-17-2015

Hello, I like to replace the cisco ASA 5510 with PA-500 in the company . I do all the necessary configuration in the PA-500 but always it still a problem of internet connection. I configure the PA-500 with the same specification configured in the Cisco ASA5510 ( MTU size, the Vrouter...) but always I still have the same problem. In the guide of PA-500 , I found this line : "Connecting a PoE enabled port to the firewall is not recommended because the system does not support the PoE operating mode." There is any problem of a compatibility between PA-500 and PowerDesine 3001 modem? Any recommandation please can help me ! Thank you very much

RCHAIBI · ‎10-15-2015

hi, @Gertjan-HFG can you please explain more what i have doing ? @Raido_Rattameister the only solution that i find it is to to the segmentation with ip address with subinterfaces and add the necessary tags for the vlan and in the switch i should configure a trunk port . I should in this way change the ip address range 😞 I don't know what should i do to realease my goal ?. how should i use PA-500 in L3 and L2 mode to do the segmentation without changing the ip address range ?? Thank you for all your helps

RCHAIBI · ‎10-15-2015

Hi, @reaper Thank you very much for your response ! @Raido_Rattameister : the Goal is to do the segmentation of the network without change the ip address range . I want for exemple to do the segmentation based on MAC address of protocole .

RCHAIBI · ‎10-15-2015

Hi, Thank you very much for your response ! @_slv_ Yes, I read this document and want to use the mac address for not change the ip address range in our office. @reaper Yes , I do this for the IT departments . I follow all this steps and I put the employees in the VLAN10. But for the HR departments I want to use other vlan 11 without change the IP address. It's possible to do the segmentation of the network with the mac address or the protocol ?? . Can you please help me for this Thank you very much for your cooperation

RCHAIBI · ‎10-15-2015

Hello, We need to set up a VLANS in the office with the PA-500 but we don't like to change our address. It's possible to configure a VLANs with MAC address or protocole with PA-500? Thanks

RCHAIBI · ‎10-04-2015

hello, I configured a PA-500 with routing mode in our company . I set the zone , the security rules , the nat rules . I allow all traffic from trust zone to untrust zone. But the problem there is no internet connection. We use a DNS server , that is in trust zone. I add a security role from untrust zone to a trust zone (with addressof DNS server) but the problem always we don't hav the internet connection in the office . I process all the steps of the administraion guide of PAN in my configuration but always i have the same issue! Any one can help me pleaseto resolve this problem

RCHAIBI · ‎09-06-2015

Hello ; Thank ou for your response , no i don't found this commande in CLI mode . I don't know why ? Please there is any method or manipulation that should i do to reduce the noise of the firewall?

RCHAIBI · ‎09-05-2015

Hello; I have a PA-500 firewall . I'd like to drops the noise of the fan : I log on the device by the CLI and i wrote : set system setting fan-mode auto But a message said taht this command is invalid by the firewall . I follow also the admin guide of PAN and the command that shwoing is : set setting fan-mode auto I wrote this command but without any result always : command invalid! Please how could i stop the noise of the firewall?

RCHAIBI · ‎09-02-2015

Hello; Thank you very much for all the respenses. It's ok , the configuration now work in Layer 3 by adding a Nat rules in the Palo Alto Networks from a vlan to outside. I really appreciate all your helps Thank you!

Member Since	‎08-04-2015 03:42 PM
Date Last Visited	‎08-13-2016 04:44 AM
Posts	31
Total Likes Received	2

Online Status	Offline
Date Last Visited	‎08-13-2016 04:44 AM

About RCHAIBI

Max number of supported tunnel VPN client to site on PA-200

Re: Problem with access to WF-500 Appliance

Re: Problem with access to WF-500 Appliance

Problem with access to WF-500 Appliance

Re: Palo alto networks licence

Palo alto networks licence

Re: Block the remote desktop acces with Palo Alto Network

Re: Block the remote desktop acces with Palo Alto Network

Re: Block the remote desktop acces with Palo Alto Network

Block the remote desktop acces with Palo Alto Network

Re: Problem with access to WF-500 Appliance

Re: configuration of the NAT rules to DMZ zone

Re: Problem with access to WF-500 Appliance

Re: Palo alto networks licence

Re: Block the remote desktop acces with Palo Alto Network

Re: configuration of the NAT rules to DMZ zone

configuration of the NAT rules to DMZ zone

Re: Palo Alto networks PA-500 with PowerDesine 3001 POE modem

Re: Deny the access to the servers in LAN zone

Re: Deny the access to the servers in LAN zone

Deny the access to the servers in LAN zone

Palo Alto networks PA-500 with PowerDesine 3001 POE modem

Re: VLAN with Palo Alto Networks PA-500

Re: VLAN with Palo Alto Networks PA-500

Re: VLAN with Palo Alto Networks PA-500

VLAN with Palo Alto Networks PA-500

palo alto networks configuration

Re: how set the fan mode to auto

how set the fan mode to auto

Re: Tagged subinterfaces configuration on L3 mode

Unlock your full community experience!

About RCHAIBI