This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About seek_2
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About seek_2
10-31-2020
6Posts
1Like
0Solutions
Oct 31, 2020Last Visited
User
Activity
User
Profile
Latest posts by seek_2
| Subject | Views | Posted |
|---|---|---|
| 1993 | 12-20-2019 01:01 AM | |
| 2221 | 12-14-2019 09:24 PM | |
| 2239 | 12-12-2019 06:41 AM | |
| 2295 | 12-10-2019 03:33 AM | |
| 3038 | 12-08-2019 10:52 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 12-20-2019 01:01 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 12-07-2019 11:11 PM |
| Date Last Visited | 10-31-2020 07:05 AM |
| Posts | 6 |
| Total Likes Received | 1 |
12-20-2019
01:01 AM
1 Kudo
Dear Palo Alto support team As I have post my question in the community, I come to conclusion that the Palo Alto firewall does not support the feature explained in the post--https://live.paloaltonetworks.com/t5/General-Topics/proxy-arp-pvlan/m-p/302528#M78834. The design case is used the the private vlan scenario where the upstream router/firewall with promiscuous port should reply to the isolated vlan clients in order to inspect the traffic between the isolated VLANs. In the Linux kernel, this feature is called the proxy_arp_pvlan which is disabled by default. The path to enable this feature is under the /proc/sys/net/ipv4/conf/all/proxy_arp_pvlan In other vendor terms, it is supported with the following name: Cisco == ARP alias Fortinet == Proxy-ARP Juniper SRX == proxy arp unrestricted Mikrotik == local-proxy-arp As the Palo Alto firewall is one the best firewall in the industry, I hope that it supports this feature. Any feedback is much appreciated. Regards
... View more
12-14-2019
09:24 PM
12-10-2019
03:33 AM
Dear Palo Alto support team
As I have post my question in the community, I come to conclusion that the Palo Alto firewall does not support the feature explained in the post--https://live.paloaltonetworks.com/t5/General-Topics/proxy-arp-pvlan/m-p/302528#M78834.
The design case is used the the private vlan scenario where the upstream router/firewall with promiscuous port should reply to the isolated vlan clients in order to inspect the traffic between the isolated VLANs.
In the Linux kernel, this feature is called the proxy_arp_pvlan which is disabled by default. The path to enable this feature is under the /proc/sys/net/ipv4/conf/all/proxy_arp_pvlan
In other vendor terms, it is supported with the following name:
Cisco == ARP alias
Fortinet == Proxy-ARP
Juniper SRX == proxy arp unrestricted
Mikrotik == local-proxy-arp
As the Palo Alto firewall is one the best firewall in the industry, I hope that it supports this feature.
Any feedback is much appreciated.
Regards
... View more
12-08-2019
10:52 PM
Hi @BPry I would like to thanks for your response and the solution. However, as Palo Alto is using Linux in the backend, I think if they decide to enable the proxy_arp_pvlan in the linux proc file, it would be a great advantage and feature-set for the Palo Alto firewall. Any other feedback regarding how to access the Palo Alto /proc file is much appreciated to enable it manually. Thanks
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
10-31-2020
07:05 AM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks