Im doing some testing in AWS with a DEV server on the inside of my vm 100.. I have E1/2 configured as gateway interface with a ENI private IP address we created in AWS. However, after troubleshooting almost the entire day I cant get it to come up. Im using 9.0.1 so this could be a bug but Im not sure. Has anybody every encountered this?
I have a better understanding of the problem. In AWS , the way the IP addresses are allocated are very confusing to me. Ive read the PA documentation and I cant find anywhere were it explains how you are supposed to use the Eth0, Eth1, etc and how these map back to the Palo Alto vm's. I have to understand IP addressing in AWS land and I just cant get my head around it. If anybody has a knowledge based article that explains this please send. Also, the vm-series deployment guide IS NOT helpful for this. Yes, I read it
I may have missed something but it sounds like you did the following
1. configured your interfaces in PAN-OS statically
2. Didn't set the AWS ipconfiguration to static
If that is the case go back into the VM-Series and change the interfaces to dynamic
For any of the dataplane interfaces only check "add default route" for your untrust interface
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!