Page 1 of 1

Problem with PaloAlto 8.0

Posted: Thu Sep 28, 2017 8:23 pm
by neomorfeusz
Hi.

I have problem with PaloAlto 8.0.0 with version EVE Community 2.0.3-77.
I am using OVA in VM ESXi, naming images are correct, permission okey, Intel VT-x already enabled.
PaloAlto start and run correct.
I add ip adres to mgmt.
I used information from:
http://www.eve-ng.net/index.php/documen ... lto-vm-100
http://www.eve-ng.net/forum/viewtopic.php?f=3&t=662

I connected my Palo Alto mgmt to my Net cloud0.

I can't ping mgmt Palo Alto.
Do you know why?

Re: Problem with PaloAlto 8.0

Posted: Thu Sep 28, 2017 10:22 pm
by ramindia
neomorfeusz wrote:
Thu Sep 28, 2017 8:23 pm
Hi.

I have problem with PaloAlto 8.0.0 with version EVE Community 2.0.3-77.
I am using OVA in VM ESXi, naming images are correct, permission okey, Intel VT-x already enabled.
PaloAlto start and run correct.
I add ip adres to mgmt.
I used information from:
http://www.eve-ng.net/index.php/documen ... lto-vm-100
http://www.eve-ng.net/forum/viewtopic.php?f=3&t=662

I connected my Palo Alto mgmt to my Net cloud0.

I can't ping mgmt Palo Alto.
Do you know why?
Is this new setup ? or you have any other device working apart from Palo alto ?

explain about your setup, VMWARE workstation, or Exsi, or baremetal EVE-Ng ?

R!

Re: Problem with PaloAlto 8.0

Posted: Fri Sep 29, 2017 7:28 pm
by neomorfeusz
Hi,

In first post I wrote that I have OVA in VM ESXi, naming images are correct, permission okey, Intel VT-x already enabled.
This is new instalation.
The same problem is with csr 1000v.
My eve has ip adress 192.168.201.104.
Csr 1000v interface g1 has ip address 192.168.201.105.
I connect this interface to Net cloud0.
In csr I configure ip route 0.0.0.0 0.0.0.0 192.168.201.254.
This ip 192.168.201.254 is gateway.

From my computer I can ping eve, gateway but can't ping csr.
From eve I can ping my computer, gateway,csr.
From csr I only can ping eve. I can't ping gateway, my computer.

Why?

Re: Problem with PaloAlto 8.0

Posted: Sun Oct 01, 2017 6:04 pm
by ping2naveen
how you are adding ip address on the MGMT interface on palo alto firewall.

PA8.0 required an additional command to assign the ip address on mgmt interface

set deviceconfig system ip-address 10.3.40.5 netmask 255.255.255.0
set deviceconfig system type static
commit


try these command and then check