This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About ismunandi
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About ismunandi
05-17-2022
3Posts
3Likes
1Solution
May 17, 2022Last Visited
User
Activity
User
Profile
Latest posts by ismunandi
| Subject | Views | Posted |
|---|---|---|
| 1451 | 05-12-2022 05:56 AM | |
| 4690 | 12-08-2021 01:53 AM | |
| 7598 | 03-02-2021 10:06 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 3 Likes | 03-02-2021 10:06 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 03-02-2021 09:30 PM |
| Date Last Visited | 05-17-2022 09:16 AM |
| Posts | 3 |
| Total Likes Received | 3 |
05-12-2022
05:56 AM
for this case I recommend to use layer 2 interface because vwire is only for physical interface and aggregate interface. You can improve on the following solutions: https://live.paloaltonetworks.com/t5/general-topics/palo-alto-layer-2-bridging/m-p/388782#M90540
... View more
12-08-2021
01:53 AM
You must understand how it works from what I describe and please try it yourself. The second line is the rule that allows 172.16.15.92 access to 172.25.10.10. if you want 172.25.10.10 to be able to access 172.16.15.92 then you have to open access in reverse as in the third line. One more thing, even though 172.25.10.10 and 172.25.10.1 are on the same network they cannot ping each other and access service ports if they are not given permission because they are in different zones (remember this is a bridging vlan with different interfaces and zones). You have to be more careful and better understand the picture that I provide. Please do the simulation in your own lab and you will understand.
... View more
03-02-2021
10:06 PM
3 Kudos
I Found The Solution : I am using topologi Like this. In Core Router i have VLAN10 with network 172.25.10.0/24. Between Distribution Switch and Server Switch I Installed Palo Alto to translate VLAN10 to VLAN1010. My Server Using VLAN1010 172.25.10.10 and still can connected to Gateway Core Router 172.25.10.1 with VLAN10. 1. Create Sub Interface in 2 Physical Interface with different vlan tag like this picture. In this Picture i translate vlan 10 to vlan 1010 with same network 172.25.10.0/24 2. In All Sub Interface create Vlan Group like this picture. 3. And result of the Vlan Group. In VLAN Group we can see there are two sub interface with different vlan tagging. 4. You can see in picture at point 1, I give two different zone at sub interface ethernet1/3.10 and ethernet1/4.1010. 5. And the result we can inspect traffic inggress and eggress from ethernet1/3.10 and ethernet1/4.1010 like this picture. Look at hit count on policy rule number one. Same Network IP with Different Zone and different VLAN Tagging :
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
05-17-2022
09:16 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks