How to verify if pause frames are being sent or received on PA-7000
11556
Created On 10/18/19 03:12 AM - Last Modified 04/01/20 19:28 PM
Objective
The objective of this article is to provide commands to confirm pause frames are being sent or received on a Palo Alto 7000 series firewall.
Environment
- Any PAN-OS.
- PA-7000 series.
Procedure
The command debug dataplane internal pdt petra counters port slot <slot no> displays information on the pause frames.
In the following example, Firewall is receiving pause frames.
PA-7050(active)> debug dataplane internal pdt petra counters port slot s1 | match pause
rx_err_pause_frames : 972407
rx_err_pause_frames : 949547
rx_ok_pause_frames : 700190
rx_ok_pause_frames : 698690
High rate of such pause frames may cause heartbeat failure as seen in the logs.System Log:
> 2019-03-31 19:54:09 PathMon slot2-path_monitor: heartbeat failure count 1, total missed 1
> 2019-03-31 19:54:10 PathMon slot5-path_monitor: heartbeat failure count 1, total missed 1
> 2019-03-31 19:54:14 PathMon slot1-path_monitor: heartbeat failure count 1, total missed 1
Additional Information
Pause frames can be caused by low resources, congestion, memory leak or similar reasons. Troubleshooting needs to be done on the device sending these frames. In this example, the remote device connected to the Firewall.