This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About ikunduraci
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About ikunduraci
12-05-2022
3Posts
0Likes
0Solutions
Dec 05, 2022Last Visited
User
Activity
User
Profile
Latest posts by ikunduraci
| Subject | Views | Posted |
|---|---|---|
| 1767 | 10-11-2020 10:01 PM | |
| 2423 | 04-16-2020 12:40 AM | |
| 2568 | 04-09-2020 07:26 PM |
User Badges
Community Statistics
| Member Since | 12-21-2019 02:19 AM |
| Date Last Visited | 12-05-2022 06:37 PM |
| Posts | 3 |
10-11-2020
10:01 PM
Hi,
Wondering if there's a way to filter the results from ML to only show results for destination IP's in the 10.0.0.0/8 range? I'm building out a greenfield rulebase, would prefer to ignore any suggested rules for external networks at this stage.
I tried the below but doesn't seem to work.
Cheers
... View more
04-16-2020
12:40 AM
Thanks Reaper - I managed to fix my issue, it was related to the fact that the interface names were different; I got caught up on the interface name having a .VLANID (e.g. eth1/1.800), I can probably blame Cisco for that 🙂 After matching the interface names (and modifying VLAN tags accordingly), all works well. Cheers
... View more
04-09-2020
07:26 PM
Hi all, Is active/active mode supported with Layer3 sub-interfaces? I'm trying this in a lab with 2 VM-50's, and whilst the cluster is formed, I seem to have intermittent packet loss; not sure if this is just a limitation of the VM series (in particular, VM-50) or the fact that they are not true layer-3 interfaces? The customer has a pair of 5220's for a greenfield deployment, but we are planning on using layer3 sub-interfaces. Both firewalls obviously have the same interface config (VLAN ID, tag etc;) albeit 1 node has IP's configured for VLAN 800-805, whilst the second node has IP's configured for VLAN 806-810. VR is not sync'd between the firewalls and each firewall has individual BGP peerings to the upstream and downstream router. The vSwitch with HA3 interface has MTU 9000. Session owner and session setup is set for first-packet. We require active/active due to asymmetric paths; the routers see ECMP paths through each firewall so depending on the hash, we can't guarantee return traffic through the same firewall node.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
12-05-2022
06:37 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks