AWS 界面中的 PA-VM 统计信息未显示在 Panorama Managed Devices Health 下。

• Panorama WebUI 显示 Bit Rate 和 Packets Per Second 的值为零

• 对于工作案例，我们看到正的接口统计值

• “show interface ethernet”的输出在“从MAC读取的物理端口计数器：”部分中显示0个值

> show interface ethernet1/2
Physical port counters read from MAC:
-----------------------------------------------------------------
rx-broadcast 0
rx-bytes 0
rx-multicast 0
rx-unicast 0
tx-broadcast 0
tx-bytes 0
tx-multicast 0
tx-unicast 0

• 在正常工作的防火墙上，可以看到物理端口计数器值

> show interface ethernet1/2
Physical port counters read from MAC:
----------------------------------------------------
rx-broadcast 0
rx-bytes 26032861494408
rx-multicast 0
rx-unicast 24488480433
tx-broadcast 0
tx-bytes 14630985784703
tx-multicast 0
tx-unicast 16939627582

• 使用 IF-MIB 的 SNMP 显示接口计数器为“0”

# snmpwalk -c public -v 2c 10.10.10.34 1.3.6.1.2.1.31 | grep "\.2 "
IF-MIB::ifName.2 = STRING: ethernet1/2
IF-MIB::ifInMulticastPkts.2 = Counter32: 0
IF-MIB::ifInBroadcastPkts.2 = Counter32: 0
IF-MIB::ifOutMulticastPkts.2 = Counter32: 0
IF-MIB::ifOutBroadcastPkts.2 = Counter32: 0
IF-MIB::ifHCInOctets.2 = Counter64: 0    
IF-MIB::ifHCInUcastPkts.2 = Counter64: 0
IF-MIB::ifHCInMulticastPkts.2 = Counter64: 0
IF-MIB::ifHCInBroadcastPkts.2 = Counter64: 0
IF-MIB::ifHCOutOctets.2 = Counter64: 0   
IF-MIB::ifHCOutUcastPkts.2 = Counter64: 0
.....

• 在工作时，我们看到非零接口计数器

# snmpwalk -c public -v 2c 10.10.10.168 1.3.6.1.2.1.31 | grep "\.2 "
IF-MIB::ifName.2 = STRING: ethernet1/2
IF-MIB::ifInMulticastPkts.2 = Counter32: 37631 
IF-MIB::ifInBroadcastPkts.2 = Counter32: 0
IF-MIB::ifOutMulticastPkts.2 = Counter32: 0
IF-MIB::ifOutBroadcastPkts.2 = Counter32: 0
IF-MIB::ifHCInOctets.2 = Counter64: 21435 
IF-MIB::ifHCInUcastPkts.2 = Counter64: 0
IF-MIB::ifHCInMulticastPkts.2 = Counter64: 37631  
IF-MIB::ifHCInBroadcastPkts.2 = Counter64: 0
IF-MIB::ifHCOutOctets.2 = Counter64: 23480 
IF-MIB::ifHCOutUcastPkts.2 = Counter64: 314
.....

• PAN-OS 10.2.3、11.0.2
• 全景
• 使用“net_ena”NIC 驱动程序的 AWS 防火墙，例如 m5 实例类型

> debug show vm-series interfaces all

Interface_name       Base-OS_port       Base-OS_MAC             PCI-ID         Driver            Eni
 mgt                     eth0          06:b1:87:03:5f:65       0000:00:05.0          ena
 Ethernet1/1             eth1          06:e2:04:5b:3b:eb       0000:00:06.0      net_ena     eni-04fb4e3b
 Ethernet1/2             eth2          06:da:90:55:42:5d       0000:00:07.0      net_ena     eni-009da723

> show system state filter cfg.platform.instance-type*
cfg.platform.instance-type: m5.4xlarge

1. 此问题已在 PAN-OS 10.2.5、10.2.6、11.0.3 或 11.1.0 中修复。
2. 升级到修复版本将解决此问题。
3. 或者，部署不使用 net_ena NIC 驱动程序的实例也可以解决此问题。