SFP port inserted in the combo port is not detected when the link partner is not connected

• An SFP module is inserted into a combo port (e.g., Ethernet1/1).
• No active link partner is connected.
• In this case, the firewall does not show the SFP module as “inserted” or active in interface status.
• Example shown below

PA-415> show transceiver-detail ethernet1/1

--------------------------------------------------------------------------------
Detailed Transceiver Information
--------------------------------------------------------------------------------
Interface:                             ethernet1/1
Vendor Name:
Vendor Part Number:                     Rev
Vendor Serial Number:
Link Length for copper:
Diagnostic Monitor Information:
--------------------------------------------------------------------------------
                                     Alarms                  Warnings
                                High          Low         High        Low
--------------------------------------------------------------------------------
Temperature           n/a
Voltage               n/a
Current               n/a
TX Power              n/a
RX Power              n/a
--------------------------------------------------------------------------------

PA-415> show system state filter-pretty sys.s1.p1.status

sys.s1.p1.status: {
link: Down,
  mode: Force,
  mru: 1540,
  nearloop: False,
  pause-frames: True,
  setting: 1Gb/s-full,
  type: RJ45,
}

• Palo Alto 415 Firewall
• PAN-OS 11.1.x
• Combo Ports

• Combo ports are versatile interfaces that offer a choice between a traditional copper (RJ-45) connection and a fiber-optic (SFP) connection.
• These ports share the same internal circuitry, These ports  are mutually exclusive meaning only one interface (either copper or fiber) can be active at a time.
• When installing a fiber SFP module in a combo port, the network device won't display the module's details until a valid connection with another device is established. 
• Once a link is active with a network partner, the SFP's information, including its internal data (EEPROM content), will be fully visible.

1. Connect the partner port to establish the link (i.e., link partner is up),
2. The system now detects the SFP and displays interface status. 
3. Details of the commands after the link up is shown below.

PA-415>  show transceiver-detail ethernet1/1

--------------------------------------------------------------------------------
Detailed Transceiver Information
--------------------------------------------------------------------------------
Interface:                             ethernet1/1
Vendor Name:                           PALO-ALTO-NTWKS
Vendor Part Number:                    PAN-SFP-SX Rev 1.0
Vendor Serial Number:                  XT2xxx00P7
Link Length for 62.5/125 um OM1 fiber: 300 m
Link Length for 50/125 um OM2 fiber:   550 m
Link Length for 50/125 um OM3 fiber:   0 m
Link Length for 50/125 um OM4 fiber:   0 m
Diagnostic Monitor Information:
--------------------------------------------------------------------------------
                                      Alarms                  Warnings
                                High          Low         High        Low
--------------------------------------------------------------------------------
Temperature       25.25 C      90.00 C       -5.00 C     85.00 C      0.00 C
Voltage            3.29 V       3.57 V        3.13 V      3.47 V      3.15 V
Current           3.39 mA     20.00 mA       0.50 mA    10.00 mA     1.00 mA
TX Power          0.19 mW      0.63 mW       0.10 mW     0.50 mW     0.13 mW
RX Power          0.26 mW      1.00 mW       0.01 mW     0.79 mW     0.01 mW
--------------------------------------------------------------------------------

PA-415> show system state filter-pretty sys.s1.p1.status

sys.s1.p1.status: {
  link: Up,
  mode: Force,
  mru: 1540,
  nearloop: False,
  pause-frames: False,
  setting: 1Gb/s-full,
  type: SFP,
}

• When the ports are not in use(disconnected), Power off the ports explicitly using the command below.
• Unless the port is powered down, it remains in autoneg mode, waiting for the peer.
• In this state, counter values will only update if new activity occurs on the port.
• Therefore, the counters are not cleared automatically.
• Once the port is powered down, all counter and temperature values are cleared.

admin@PA> configure
admin@PA# set network interface ethernet ethernet1/1 link-state down
admin@PA# commit
admin@PA# exit