PA-445 on PAN-OS 11.1.2-h3

[Red_Lobster]

First time posting so please bare with me.

Currently running into an issue that looks like a potential bug or an issues specifically with the PA-445 model (Support Case has been submitted and is in the works; but we'll see what happens) Two different PA-445s that we've tested with have shown this issue (both PAs are on PAN-OS 11.1.2-h3). Below is a very basic description of the setup:

On PA-445 - OSPF running on interface ethernet1/1 (SFP Port) connected to a Cisco Nexus N9K-C9508 via fiber.

• on the N9K side, the interface shows "connected" and link appears to be up
• on PA-445 side (both from CLI and Web GUI) interface ethernet1/1 shows down
• looking at the system logs, I see a log message for an interface "ethernet1/12" which is what leads me to believe this is a bug because the PA-445 doesn't have an ethernet1/12.

All the troubleshooting I've done is replacing the SFP modules, replacing the fiber patches, trying different ports on the N9K (wish I could try swapping ports on the PA-445, but of course we can't cause there isn't another normal data SFP port available to test with. Who needs a management interface connected via fiber? Anyways...) trying on two separate PA-445s, and nothing. All SFP modules and fiber patches I've tested with work in other devices including other Palo Alto firewall models.

All the searching I've done on this kind of issue has proven fruitless. Has anyone else seen this type of thing? Attached is a screenshot of the system log message. When ethernet1/1 is plugged in, this message appeared in the system logs.

[BPry]

@Red_Lobster,

I would recommend opening a support case if you haven't already, but it displaying ethernet1/12 is certainly a bug no matter what. 

[Red_Lobster]

I already had one open and they responded back stating the logs showing ethernet1/12 is a known internal issue that will be addressed in PAN-OS 11.1.3 with a release date around mid-May, 2024.

They're still looking into ethernet1/1 not working via SFP.

I mainly asked this wondering if anyone else with these model NGFW have ran into any issues like it before I got the response from Support.