About Gareth.Doyle

So when I got a chance to test this out it sitll didn't work, despite the outside interface being assigned a dynamic IP by the ISP.   I think the issue is simply that I didn't have a NAT configured. My understanding was that the firewall would form a dynamic NAT, but this does not appear to be the case. I put the NAT rule in place and ran a simple test command and it NAT'd appropriately. I am going to attempt to connect this again this evening if I have a chance. ... View more

@MP18, I finally had a chance to create the separate VR. When I did this I moved my connection over directly to my modem and rebooted the modem, but I had to go get my laptop to console into the PA-220. I then realized that I hadn't committed my changes. So I consoled into the PA-220 to commit and noticed that the port was pulling an IP address from my ISP.   Seems like all is well now and I didn't even need that other VR. Interesting how sometimes things just work...   Thanks for the assistance! ... View more

System logs don't show anything other than the port going up or down and my logging into the device.   I will create another VR and assign it to that, but then I will also have to reassign the inside VLAN to that new VR as well. That's not a big deal. I'll reset the modem when I make this change as well. ... View more

It failed again. Please see the below outputs from CLI:   Plugged straight into the Modem: PA-220> show interface ethernet1/1 -------------------------------------------------------------------------------- Name: ethernet1/1, ID: 16 Link status: Runtime link speed/duplex/state: 1000/full/up Configured link speed/duplex/state: auto/auto/auto MAC address: Port MAC address aa:aa:aa:aa:aa:aa (changed just because) Operation mode: layer3 Untagged sub-interface support: no -------------------------------------------------------------------------------- Name: ethernet1/1, ID: 16 Operation mode: layer3 Virtual router default Interface MTU 1500 Interface IP address (dynamic): 0.0.0.0/0 Interface management profile: N/A Service configured: Zone: outside-L3, virtual system: vsys1 Adjust TCP MSS: no Policing: no -------------------------------------------------------------------------------- -------------------------------------------------------------------------------- Physical port counters read from MAC: -------------------------------------------------------------------------------- rx-broadcast 0 rx-bytes 1024900 rx-multicast 0 rx-unicast 15589 tx-broadcast 6 tx-bytes 2076 tx-multicast 0 tx-unicast 0 -------------------------------------------------------------------------------- -------------------------------------------------------------------------------- Detailed physical port counters read from MAC: -------------------------------------------------------------------------------- rx packets 256 to 511 bytes 6 -------------------------------------------------------------------------------- Hardware interface counters read from CPU: -------------------------------------------------------------------------------- bytes received 962544 bytes transmitted 3012678 packets received 15589 packets transmitted 8809 receive incoming errors 0 receive discarded 0 receive errors 276 packets dropped 0 -------------------------------------------------------------------------------- Logical interface counters read from CPU: -------------------------------------------------------------------------------- bytes received 922054 bytes transmitted 3012678 packets received 15313 packets transmitted 8809 receive errors 0 packets dropped 0 packets dropped by flow state check 0 forwarding errors 0 no route 0 arp not found 0 neighbor not found 0 neighbor info pending 0 mac not found 0 packets routed to different zone 0 land attacks 0 ping-of-death attacks 0 teardrop attacks 0 ip spoof attacks 0 mac spoof attacks 0 ICMP fragment 0 layer2 encapsulated packets 0 layer2 decapsulated packets 0 tcp cps 0 udp cps 0 sctp cps 0 other cps 0 --------------------------------------------------------------------------------     When it is diconnected: PA-220> show interface ethernet1/1 -------------------------------------------------------------------------------- Name: ethernet1/1, ID: 16 Link status: Runtime link speed/duplex/state: unknown/unknown/down Configured link speed/duplex/state: auto/auto/auto MAC address: Port MAC address aa:aa:aa:aa:aa:aa Operation mode: layer3 Untagged sub-interface support: no -------------------------------------------------------------------------------- Name: ethernet1/1, ID: 16 Operation mode: layer3 Virtual router default Interface MTU 1500 Interface IP address (dynamic): 0.0.0.0/0 Interface management profile: N/A Service configured: Zone: outside-L3, virtual system: vsys1 Adjust TCP MSS: no Policing: no -------------------------------------------------------------------------------- -------------------------------------------------------------------------------- Physical port counters read from MAC: -------------------------------------------------------------------------------- rx-broadcast 0 rx-bytes 1177938 rx-multicast 0 rx-unicast 17963 tx-broadcast 7 tx-bytes 2422 tx-multicast 0 tx-unicast 0 -------------------------------------------------------------------------------- -------------------------------------------------------------------------------- Detailed physical port counters read from MAC: -------------------------------------------------------------------------------- rx packets 256 to 511 bytes 7 -------------------------------------------------------------------------------- Hardware interface counters read from CPU: -------------------------------------------------------------------------------- bytes received 1106086 bytes transmitted 3014046 packets received 17963 packets transmitted 8813 receive incoming errors 0 receive discarded 0 receive errors 312 packets dropped 0 -------------------------------------------------------------------------------- Logical interface counters read from CPU: -------------------------------------------------------------------------------- bytes received 1062832 bytes transmitted 3014046 packets received 17651 packets transmitted 8813 receive errors 0 packets dropped 0 packets dropped by flow state check 0 forwarding errors 0 no route 0 arp not found 0 neighbor not found 0 neighbor info pending 0 mac not found 0 packets routed to different zone 0 land attacks 0 ping-of-death attacks 0 teardrop attacks 0 ip spoof attacks 0 mac spoof attacks 0 ICMP fragment 0 layer2 encapsulated packets 0 layer2 decapsulated packets 0 tcp cps 0 udp cps 0 sctp cps 0 other cps 0 -------------------------------------------------------------------------------- ... View more

@MP18, when the modem is directly connected to a laptop the laptop has full internet access and pulls the IP/gateway information from the ISP, when my router is connected it pulls the IP address and gateway information as well.   It appears that the PA-220 does not pull this information though. I think my next troubleshooting step is simply hooking up the PA-220 to the modem and nothing else and seeing if it can pull that information. I think I jumped off the cliff next time instead of using the stairs. 🙂   ... View more

@Ben_Travis, no the modem is just a modem.   Current setup is ISP connects to the Modem which connects to the Router. I own all of the equipment. I want the setup to be ISP connects to the Modem connects to the PA-220 connects to the Router. I plugged the ISP into the Modem, the modem into the PA-220, turned the router into an AP and plugged that into the PA. DHCP functionality was disabled on the router and enabled on the PA-220. Also, the PA-220 was setup to dynamically receive the IP address from the ISP.   The IP address never changed from 0.0.0.0 on that interface. Should it have?   Thanks. ... View more

Thanks for the response. I didn't anything stand out in the system logs, a lot of failure to resolve DNS names for content updates and such, but nothing more than that, all stuff I would expect to see if there was no internet connectivity.   I have confirmed that ethernet1/1 is in the untrust zone and belongs to the default virtual router (I haven't set up any other VRs). I am able to provide screenshots or anything else needed now that I have regained access to my network and the internet (I reset my router to factory defaults and removed my firewall from the equation at this point). ... View more