Palo Alto Networks Knowledgebase: Incomplete ARP Entries on Subinterface

Incomplete ARP Entries on Subinterface

5483
Created On 02/07/19 23:36 PM - Last Updated 02/07/19 23:36 PM
Mobile Network Infrastructure
Resolution

Issue

Receiving incomplete ARP entries on a newly created Layer3 subinterface configured for specific VLAN tags. The traffic on the untagged physical interface works fine.

 

Cause

The switchport that the Palo Alto Networks firewall is connected to may not be configured as a trunk link, or the specified VLAN tags may not be allowed across the link.

 

Resolution

Verify the port on the upstream device is configured for VLAN tagging and that the upstream device is allowing the specified VLAN tags across the link. Make sure the subinterface on the firewall has the corresponding VLAN tag specified appropriately.

User-added image

 

owner: jtyler



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm6vCAC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language