Cannot ping FW from CentOS connected VM

[ausafali88]

Dear experts;

I have the following setup in Azure:

CentOS-1 --------(fwVNET/Trust)-----FW----------(fwVNET/Untrust)-----CentOS-Untrust

But I cannot ping FW interface even with all Mgmgt profiles and addresses configured (which are in same subnet obviously). All NSG's in Azure allow ICMP, and even SSH is not allowed.

Can anyone help?

[reaper]

is ARP resolving on the firewall ? Have you verified there's no security policy blocking the pings (app ping instead of icmp or implied intrazone policy at the end). Can you doublecheck the mgmt profiles have ping checked and are assigned to the interfaces

[ausafali88]

Yes profiles have ping checked, and ARP is not resolving....which means a Layer 2 disconnet, but why?

[ausafali88]

Should i allow ARP (via Ethertype)in my custom Interface profiles attached to interfaces?

[ausafali88 · Accepted solution]

Done by Plao Alto support.

[jperry1]

What exactly does "done by palo alto support" mean?

Can you please provide a case number?

[ausafali88]

It means:

1. Whenever yuou deploy a VM in Azure, never configure a Static IP inside of Guest OS, it is alwys via DHCP even if Static IP in Azure is selected.
2. Azure has a completely different routing architecture than other Hypervisors.

cheers.