Azure pa-vm DP interfaces flipped
2681
Created On 11/06/23 20:33 PM - Last Modified 11/06/23 20:35 PM
Symptom
- Azure pa-vm DP interfaces flipped. Trust traffic coming in the Untrust zone and the Untrust traffic coming in the Trust zone.
Environment
- Azure pa-vm
Cause
- Azure interface order between eth1, eth2 are flipped comparing to ethernet1/1 and ether1/2 on pan-os level
Resolution
- Check to see if interface mac address from Azure console and pan-os CLI >show interface all
- If they don't match or order is reversed, we can try powering off vm, detaching and reattaching interfaces in the correct order until they match
- If they already match, we need Azure support to look at the backend like the support that has access to Top Of the Rack switches (TOR).