This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
About StevenTurner
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About StevenTurner
08-10-2022
10Posts
0Likes
0Solutions
Aug 10, 2022Last Visited
User
Activity
User
Profile
Latest posts by StevenTurner
| Subject | Views | Posted |
|---|---|---|
| 176 | 05-31-2022 10:57 AM | |
| 210 | 05-31-2022 08:56 AM | |
| 682 | 05-27-2022 08:40 AM | |
| 801 | 05-25-2022 05:30 PM | |
| 849 | 05-25-2022 12:15 PM |
User Badges
Community Statistics
| Member Since | 04-08-2019 11:34 AM |
| Date Last Visited | 08-10-2022 12:30 PM |
| Posts | 10 |
05-31-2022
10:57 AM
One of my peers did remember another site using the same AS. Didn't even know it was there. Thanks for the help
... View more
05-31-2022
08:56 AM
I do see the PAN AS in the path for 10.240.0.0/16, didn't notice that as it is not expected. The 10.242.0.0/16 route is learned from the same neighbor and is just another route same as the 10.240, the PAN AS does not show up in this one, odd. Both routes are out the same interface and are NOT learned from any other peer. Why would the PAN place it's own AS here? Thanks for the help Astardzhiev
... View more
05-27-2022
08:40 AM
So with a capture I can see my route getting sent in the update message. In fact, I see a second route 10.242.0.0/16 that is accepted and placed in the fib. However the 10.240.0.0/16 seems to be rejected. Next hop on both destinations is the same. The suggested logs did not produce any insight to the cause. 10.200.250.26 - is the PAN 10.200.250.25 - is the DMVP peer
... View more
05-25-2022
05:30 PM
The peer is ebgp. The next hop is available, same as all the other routes. That is the oddity here, this route is no different than all the others. What logs and degus would you recommend? I have not had much experience going down that route to troubleshoot. Thanks,
... View more
05-25-2022
12:15 PM
screen shot of my Import rule "Import-From-DMVPN" is the one we are looking at. The exact match button is not checked.
... View more
05-25-2022
12:10 PM
Sorry, you are correct. My allow list is 10.0.0.0/8. Had a brain fart.
... View more
05-24-2022
07:37 PM
Thanks for the reply. My import list is allow 10.0.0.0/16 & the route I’m missing is 10.240.0.0/16. Exact match is not checked. It’s odd to me as non of my FW are having this drop by policy ticking. They are all on the same template with the same BGP peer. I’m have trouble finding any documentation on what this policy deny is meaning. Anyone know? Thanks
... View more
05-24-2022
03:10 PM
I'm having trouble seeing one route in my RIB and FIB. My BGP peer shows it is advertising the route to the Palo Alto, however I see the following when showing the peer at the PAN: sstadmin@200-PFW-01> show routing protocol bgp peer peer-name DMVPN-Router Prefix counter for: bgpAfiIpv4 / unicast Incoming Prefix: Accepted 49, Rejected 0, Policy Rej 1, Total 49 Notice one router is rejected by policy. I feel this is my missing route. FYI the reject default route but is not ticked in the BGP configuration, so this rejected route is not that. What is causing this one rejected route by policy? Thanks
... View more
03-25-2022
12:00 PM
I'm guessing as no one has replied this is not possible? If that is correct, please saw so and I'll go another route. Thanks,
... View more
03-23-2022
04:01 PM
I have an inbound SFTP, I need to secure access to from only a single domain, say *.mydomail.com/. I have tried with a URL category in the security policy. This does not seem to work. The source is in AWS, so to much of a hassle to manage a source ip list to allow. The source owner says he is AWS-US-EAST-1 zone. However the source IPs he listed are in Palo Alto EDL Hosting service, AWS US East Amazon AppFlow IPv4. link to list below: https://saasedl.paloaltonetworks.com/feeds.html SFTP Source list provided: https://ip-ranges.amazonaws.com/ip-ranges.json Any suggestions?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
08-10-2022
12:30 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks