About PAN-Bariz2020

PAN-Bariz2020 · ‎08-05-2020

I have the same issue with PA-3220 the LACP transmission rate is set to slow on PA-Firewalls. I face this issue during migration from Old PA3020 to PA3220. This is the error message SYSTEM ALERT : critical : LACP interface ethernet1/1 moved out of AE-group ae1. Selection state Unselected(Link down)

PAN-Bariz2020 · ‎08-04-2020

Hi All, It was nothing but ARP cache from the Service Provider side, There was another switch between the Palo Alto Networks Firewall and ISP router. The ARP cache that i was getting on the firewall was from the switch not from the actual ISP router. The issue immediately got fixed upon ARP cache clear.

PAN-Bariz2020 · ‎07-30-2020

Thank You. I had performed those steps on the first failure and did not found any issue. I believe there might be a VRF issue from the ISP site. I will be able to get back on this next week.

PAN-Bariz2020 · ‎07-24-2020

Dynamic IP And Port is selection, some of them also have bi-directional option checked.

PAN-Bariz2020 · ‎07-23-2020

I did [show arp all] and found the ISP router gateway ip address has a proper arp cache. I also did a traceroute, but found a couple of hopes after the gateway is not being properly resolved, instead of IP address there was *** which indicates arp cache issue at that nodes. It is still not solved, i am following that closely.

PAN-Bariz2020 · ‎07-22-2020

Yes! Security Policy and NAT rules are working according to the monitor tab. I see packet send but 0 on the packets received.

PAN-Bariz2020 · ‎07-22-2020

Hi, I am working on a Palo Alto Networks Firewall migration project. I exported and imported the configuration with a few errors that I fixed and when migrating from the old to the new PA-3220 firewalls. All internal communications wtih LDAP and other servers are working and the routing protocols are coming up internally and externally. I can also ping the default gateway of ISP from the outside interface of the new Firewall, but the internet is totally down. I checked the traffic under monitor and found that all the packets are aging-out although they are all allowed. I do have default gateway setup and a default route towards the gateway, I checked the arp and routing table looks fine. What is the issue? anybody please?

Date Registered	‎07-07-2020 12:43 PM
Date Last Visited	‎08-05-2020 02:47 PM
Total Messages Posted	7
Total Likes Received	1

Online Status	Offline
Date Last Visited	‎08-05-2020 02:47 PM

About PAN-Bariz2020

Re: LACP PROBLEM

Re: Internet Outage Occurs After Migration - All Packets Aging-out

Re: Internet Outage Occurs After Migration - All Packets Aging-out

Re: Internet Outage Occurs After Migration - All Packets Aging-out

Re: Internet Outage Occurs After Migration - All Packets Aging-out

Re: Internet Outage Occurs After Migration - All Packets Aging-out

Re: Internet Outage Occurs After Migration - All Packets Aging-out

Re: Internet Outage Occurs After Migration - All Packets Aging-out

Re: Internet Outage Occurs After Migration - All Packets Aging-out

Re: Internet Outage Occurs After Migration - All Packets Aging-out

Re: LACP PROBLEM

Re: Internet Outage Occurs After Migration - All Packets Aging-out

Re: Internet Outage Occurs After Migration - All Packets Aging-out

Re: Internet Outage Occurs After Migration - All Packets Aging-out

Re: Internet Outage Occurs After Migration - All Packets Aging-out

Re: Internet Outage Occurs After Migration - All Packets Aging-out

Internet Outage Occurs After Migration - All Packets Aging-out

Strata

Prisma

Cortex

About PAN-Bariz2020