Page 1 of 1

Eve-ng 5.0.1-79 and Palo Alto PANOS?

Posted: Mon Apr 10, 2023 9:13 pm
by nickolas
Bare Metal install
Dell PowerEdge R650
128 Gb RAM
processor : 111 <- virtual CPU's
vendor_id : GenuineIntel
cpu family : 6
model : 106
model name : Intel(R) Xeon(R) Gold 6348 CPU @ 2.60GHz
stepping : 6
Linux usep-netutil02 5.17.8-eve-ng-uksm-wg+ #1 SMP PREEMPT Mon May 16 10:08:59 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
Trying to use the PANOS KVM qcow2 images from the support portal.

The only one of these that gave me a working CLI was 9.1.14-h4, and actually looked like everything was ok, but putting at IP on the management interface and committing it never changed the interface.

5257953280 Apr 10 11:54 PA-VM-KVM-10.2.2.qcow2 <- Would not let me log in, takes admin/admin then does nothing, no output at all.
3084582912 Apr 10 12:19 PA-VM-KVM-9.1.14-h4.qcow2 <- see above
3614441472 Apr 10 12:20 PA-VM-KVM-10.0.10.qcow2 <- Same as 9.1.4-h4, commits go with out error, but no interface changes.
4562026496 Apr 10 12:21 PA-VM-KVM-10.1.9.qcow2 <- Same as 9.1.4-h4

I am not making any changed from the default settings page spinning these nodes up. Am I missing some setting that might be needed for the hardware I have?

Re: Eve-ng 5.0.1-79 and Palo Alto PANOS?

Posted: Mon Apr 10, 2023 9:24 pm
by nickolas
on a lark I tried under 9.1.14-h4 to set etherenet1/1 and give it a virtual router and zone. That configuration works. I was able to connect that interface to my cloud management network, and ping 8.8.8.8 on the internet. But I cannot use my Management interface..

Re: Eve-ng 5.0.1-79 and Palo Alto PANOS?

Posted: Mon Apr 10, 2023 10:22 pm
by nickolas
OK, found my issue with 3 of the 4. 10.2.2 will not work as far as I can tell.

The others that let me commit were simply a matter of disabling DHCP Client on the management interface.. I am so used to using physical firewalls where I do most of the config in the gui from a laptop on the default 192.168.1.1 IP that I had never set one CLI that was set to DHCP.

Re: Eve-ng 5.0.1-79 and Palo Alto PANOS?

Posted: Tue Apr 11, 2023 10:15 pm
by Uldis (UD)
Just tested all your versions, and works w/o issues

Just set x4 CPU and 8192M RAM
Qemu options line added -cpu host at the end;

Code: Select all

-machine type=pc,accel=kvm -nographic -rtc base=utc -cpu host
Qemu version 5.2.0

Even version 11.0.0 is ok

All versions management interface has DHCP enabled, so no issues here at all