About Alleria

Thanks so much for replying I kinda figured that this was going to be a big issue.  I am waiting to here back from the guy that I bought it from to figure out what he wants to do.  He was offering me 60% back on the cost of the firewall but, now that I have this figured out I know that they need to work this out or give me my money back.  ... View more

Ok I am now on the network.  when I attempted to do a admin@PA-3020> request system software check I got this from the firewall Server error : An active license is required for this feature I'm guessing that this is a major road block.    ... View more

Just noticed this 9914 packets transmitted, 0 received, +7854 errors Seen it when I ended the pinging that I had left on.    Pretty sure that those were the counters that I had looked at earlier   admin@PA-3020> show counter interface management Interface: Management Interface ------------------------------------------------------------------------------- ------------------------------------------------------------------------------- Logical interface counters: ------------------------------------------------------------------------------- bytes received 0 bytes transmitted 0 packets received 0 packets transmitted 0 receive errors 0 transmit errors 0 receive packets dropped 0 transmit packets dropped 0 multicast packets received 0 I didn't setup one of the ethernet ports cause I am still learning this CLI.  I tried to setup ethernet port 1/1.  I got this when I tried to commit.    . Validation Error: zone -> untrust -> network -> virtual-wire 'ethernet1/1' is not a valid referenc e zone -> untrust -> network -> virtual-wire is invalid This operation invalidates configuration for devices -> localhost.localdomain -> vsys -> vsys1 -> zone -> untrust network -> interface -> ethernet is invalid [edit] admin@PA-3020# ... View more

I connected just the pc into the firewall and i tried several different ports, and I had no luck pinging out of the firewall or pinging the firewall from the pc.  The counters on the mgt interface also are not going up, and wireshark saw no icmp trafic or any other traffic that wasn't generated by the pc itself.  I have never seen a bad logical interface, but my experience is limited to Cisco and Bay Networks.  Is there a way around this problem.   ... View more

Sorry for the delay in a response.  I had a problem with wireshark not seeing my ethernet connection.  Once I reinstalled it things worked much better.  But I also had to work on my house funny how a leaking roof takes priorities.  Anyway,  I did some ping tests with wireshark running on the pc that I connect to the firewall with.  While I was able to see pings to that pc and I am getting data all of the time I am not able to see pings to or from the firewall.    I got this firewall from ebay.  If there is an issue with getting it to work I will have a hard time getting my money back.  I have had it for a month now.  ... View more

I just tried the ping source and host and it was not successful.  Also this firewall atm is only on one network, so there really shouldn't be any issues there.   Part of my problem here has been the fact that I am on 6.01 so most of the documentation for 6.01 is not available online anymore, most of what I have been able to do I or figured out I have done on my own by exploring through the CLI.  I have added IPs to the permitted IPs however upon checking the ARP table nothing seems to be getting into the firewall as it is.  ... View more

I will check the ping option.  I knew that there had to be a setting for the ping reply just hadn't found it yet.  But since I did a factory reset I was thinking that it should be replying.  The firewall is replying to a ping from itself.  So I wasn't overly concerned about it.  Just an fyi.  I have held a CCNP I have worked with and installed Cisco routers for a number of years.  I know how to make IP networks work.  The firewall cannot ping the gateway router or pcs on the network, nor can they ping the firewall.  The firewall is configured with 10.0.1.5/24 and the router is 10.0.1.1/24 The network is pretty simple but for some reason, its just not working.  I have a pc that is using a terminal cable and I can windows terminal into that pc I work on it almost daily and i learn more and more every day but its just working yet.  Do I need to turn on the Ethernet ports like I would on a Cisco router.  I haven't found anything that looks like that in the configuration but it is something that makes sense.  ... View more

Here is my deviceconfig   show deviceconfig deviceconfig { system { ip-address 10.0.1.5; netmask 255.255.255.0; update-server updates.paloaltonetworks.com; update-schedule { threats { recurring { weekly { day-of-week wednesday; at 01:02; action download-only; } } } } timezone US/Pacific; service { disable-telnet yes; disable-http yes; } hostname PA-3020; default-gateway 10.0.1.1; dns-setting { servers { primary 10.0.1.1; } } } setting { config { rematch yes; } management { hostname-type-in-syslog FQDN; } } } [edit] admin@PA-3020#     If there is another show command you would like to see let me know.  ... View more

I am plugged into the management port and I started this process with a factory reset. ... View more