About myky

Hi All,   PA-3060, PAN-OS 7.1.17   Please see below:     LACP: ********************************************************************************** AE group: ae1 Members: Bndl Rx state Mux state Sel state ethernet1/17 yes Current Tx_Rx Selected ethernet1/18 no Current Attached Selected Status: Enabled Mode: Active Rate: Fast Max-port: 2 Fast-failover: Disabled Pre-negotiation: Disabled Local: System Priority: 32768 System MAC: 00:1b:17:00:01:01 Key: 48 Partner: System Priority: 10 System MAC: 00:01:00:01:00:01 Key: 3000 Port State -------------------------------------------------------------------------------- Interface Port Number Priority Mode Rate Key State -------------------------------------------------------------------------------- ethernet1/17 32 32768 Active Fast 48 0x3F Partner 36866 20 Active Fast 3000 0x3F ethernet1/18 33 32768 Active Fast 48 0x0F Partner 40962 21 Active Fast 3000 0x07 Port Counters -------------------------------------------------------------------------------- Interface LACPDUs Marker Marker Response Error Sent Recv Sent Recv Sent Recv Unknown Illegal -------------------------------------------------------------------------------- ethernet1/17 11390156 11277328 0 0 0 0 0 0 ethernet1/18 11394781 11281914 0 0 0 0 0 0   -------------------------------------------------------------------------------- Name: ethernet1/18, ID: 33 Link status: Runtime link speed/duplex/state: 10000/full/up Configured link speed/duplex/state: auto/auto/auto MAC address: Port MAC address 00:1b:17:00:01:21 Aggregate group : ae1 Operation mode: layer3 -------------------------------------------------------------------------------- Physical port counters read from MAC: -------------------------------------------------------------------------------- rx-broadcast 8685 rx-bytes 10465767928 rx-multicast 11788416 rx-unicast 6900843 tx-broadcast 2313 tx-bytes 10372413228 tx-multicast 11395077 tx-unicast 6893704 -------------------------------------------------------------------------------- Hardware interface counters read from CPU: -------------------------------------------------------------------------------- bytes received 1495677902 bytes transmitted 1412989548 packets received 11664365 packets transmitted 11395077 receive incoming errors 0 receive discarded 0 receive errors 0 packets dropped 0 --------------------------------------------------------------------------------     I assume the next step is the switch port check?   Thanks, Myky ... View more

Hi All,   What additional tool can l use to get CPS/SPS intonation hitting specific zone? I found this KB with three wonderful MIBs: https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/zone-protection-and-dos-protection/zone-defense/take-baseline-cps-measurements-for-setting-flood-thresholds/how-to-measure-cps  Is there a way to get the same statistics for ICMP traffic? Are there any useful API calls to get similar or better statistics?   Thanks, Myky ... View more

Hi All,   Basic question and l think l know the answer but just would like to confirm. Is it the same for the DoS protection profiles if you compare with normal security policies, fist match from top to bottom? I have a general DoS rule with broad src and dst address groups but the requirement is to exclude few IPs from those groups. l want to create a rule above generic DoS rule and exclude few actions like ICMP flood etc.    Thx, Myky ... View more

Hi All,   I guess it is expected for the device to throw the error message below:     Thanks, Myky ... View more