About Shuttermed

I noticed that in some of our SOHO sites, the tunnel interface for VPN to the data center has an IP address and in other cases it does not.  Can someone explain the value of having an IP address on the tunnel interface versus not?    I'm working through an arp cache issue that arises on a SOHO site which does not specify an IP address but the site with the IP defined does not run into the same issue. It's long so I won't get into it here.    A further oddity is that the PAN in the data center - it's route to the SOHO has a destination of the tunnel interface (tunnel.1) but no next hop IP address is defined, although the tunnel interface does have an IP address assigned to it. Then on the SOHO side, the route to the corporate network has the tunnel interface specified *and* a next hop value of the IP address of that same tunnel.   Insight appreciated. ... View more

An intriguing feature of PAN OS 8.0.9 is the ability to commit your own changes as opposed to all candidate config. This would be great because it's often that two or more engineers will have changes that overlap pending the approval chain. But if I click on Commit Changes Made By (my user ID) - and then try to Preview Changes, I get an error like: Preview-Chg Status Completed Result Failed Details This operation is blocked because of following changes by other administrators: WorkAway-17 modified by babadoo in vsys vsys1 rulebase security rules To proceed with the operation, please select all of these administrators   Because the preview doesn't work for the individual user, I haven't pressed ahead to actually commit my changes. Is it the case that Commit works but not the Preview Changes? Or is the whole thing just not ready for prime time? Or could I be misunderstanding the purpose and value of the Commit Changes Made By: widget?    Thank you. ... View more