This is the retired Shane Killen personal blog, an IT technical blog about configs and topics related to the Network and Security Engineer working with Cisco, Brocade, Check Point, and Palo Alto and Sonicwall. I hope this blog serves you well. -- May The Lord bless you and keep you. May He shine His face upon you, and bring you peace.
Tuesday, December 9, 2014
Palo Alto: In Initial Configuration, Commit Fails Due To Virtual-Wire Config
In the initial configuration of the Palo Alto, I notice that if you do not want to do virtual wire, you have to go into Network --> Virtual Wires and delete the default that is configured to get the commit to succeed. I dont love that really, but if you are configuring for a Layer 3 firewall, then I have found I have to go delete this out.
Subscribe to: Post Comments (Atom)
The Palo Alto firewall is capable of L3 and virtual wire simultaneously, the commit is usually an issue if you have not properly configured them both. I run virtual wire and L3 all the time in my installs as a matter of fact I usually do Tap as well to provide another resource for future fault isolation.ReplyDelete
Maybe, but this seemed to work for me in this situation.Delete