PA-VM-01 can't ping to PA-AM-02 via External Interface.

[Chheang]

Hi all,

I am a new Palo Alto firewalls learner, I start the lab which has 2 PA-VMs direct connected (in the purpose of testing VPN site to site) but it can't ping to each other it showing destination unreachable. I had tried to configure Interface management by allowed ping on both PAs but it's still not working, please help!!

Thanks,

[SebRupik]

Hi there,

On the CLI, the ping command defaults to being sourced via the management interface. Can you try your test again but source it from the outside interface IP:

eg for PA-VM-01:

ping source <PA-VM-01-outside_IP> host <PA-VM-02-outside_IP>

cheers,

Seb.