This was the resolution to the ping issue - I did not source from the outside interface. I still could not ping until I removed everything and started over. I must have had something configured incorrection - I should not build firewalls when I'm half asleep 🙂
... View more
I have backed out my configuration and started over - I now see traffic leaving the outside interface. I obviously had something configured incorrectly so I'm not sure what the solution was but I appreciate everyone's input.
... View more
I cannot get traffic to go out my outside interface - it will only go out the Management interface I have a PA-410 with several Inside interfaces / Outside (connected to an ASA) / Management (connected to my Inside network) Note: I changed the Outside IP's first 3 octets from the real to 3.3.3. in this post to protect the future public IP for this firewall. Setup looks like this PC <-> switch <-> (ethernet1/2.32)PA-410(eithernet1/1) <-> (eithernet0/0)ASA (ethernet0/1)<-> Inside network <-> ISP If I plug directly into the ASA's 0/0 interface & give my PC an IP in the 18.104.22.168/29 range - I can connect just fine to the internet Management: 192.168.0.3/24 Inside: 172.31.32.1/24 Internet: 22.214.171.124/29 ASA: 126.96.36.199/29 - The ASA will PAT all traffic so it can cross the Inside network and get to the Internet. VR - All interfaces added Includes static route 0.0.0.0/0 -> 188.8.131.52 (See below) When I connect with my PC to the Palo I get no internet From the PC I can ping the gateway 172.31.32.1 From the PC I can NOT ping google 184.108.40.206 From the ASA I can ping the Palo outside 220.127.116.11 interface From the ASA I can ping google (18.104.22.168) From the Palo CLI I can NOT ping the ASA interface 22.214.171.124 From the Palo CLI I can ping itself 126.96.36.199 From the Palo CLI I can ping google (188.8.131.52) but the ping goes out the management interface not the Outside interface VIRTUAL ROUTER: DCS-Campus (id 1) ========== destination nexthop metric flags age interface next-AS 0.0.0.0/0 184.108.40.206 10 A S ethernet1/1 220.127.116.11/29 18.104.22.168 0 A C ethernet1/1 22.214.171.124/32 0.0.0.0 0 A H 172.31.8.0/24 172.31.8.1 0 A C ethernet1/2.8 172.31.8.1/32 0.0.0.0 0 A H 172.31.16.0/24 172.31.16.1 0 A C ethernet1/2.16 172.31.16.1/32 0.0.0.0 0 A H 172.31.24.0/24 172.31.24.1 0 A C ethernet1/2.24 172.31.24.1/32 0.0.0.0 0 A H 172.31.32.0/24 172.31.32.1 0 A C ethernet1/2.32 172.31.32.1/32 0.0.0.0 0 A H 172.31.128.0/24 172.31.128.1 0 A C ethernet1/2.128 172.31.128.1/32 0.0.0.0 0 A H 172.31.192.0/24 172.31.192.1 0 A C ethernet1/2.192 172.31.192.1/32 0.0.0.0 0 A H 172.31.248.0/24 172.31.248.1 0 A C ethernet1/2.248 172.31.248.1/32 0.0.0.0 0 A H total routes shown: 17
... View more