How to Troubleshoot Connectivity Issues on Management Interface?

How to Troubleshoot Connectivity Issues on Management Interface?

45362
Created On 09/26/18 13:54 PM - Last Modified 06/16/23 20:21 PM


Resolution


 

  1. From laptop: Download and install wireshark.  Configure ip address with the same subnet as firewall-management's ip.
  2. From firewall: Directly connect the above laptop to management interface.  Note: Make sure management's LED is GREEN and blinking.
  3. From laptop: Run wireshark. Issue a ping command to firewall-management's ip.
  4. From firewall: From the console port, run the following commands:
admin@lab> show interface management
admin@lab> show arp management  (look for laptop's MAC address)
admin@lab> ping host <laptop's ip address>
admin@lab> show arp management (look for laptop's MAC address)
  1. From laptop: Stop wireshark and review for ARP packets and ICMP packets.
  2. To perform tcpdump from console, please refer to below.
  • Some examples on performing tcpdump:

tcpdump.JPG

port443.JPG

src.JPG
 

  • The capture file can be viewed through the CLI using the following command:
admin@lab> view-pcap mgmt-pcap mgmt.pcap
 
  • The PCAP can be exported using the following commands:
admin@lab> scp export mgmt-pcap from mgmt.pcap to (username@host:path)

admin@lab> tftp export mgmt-pcap from mgmt.pcap to <TFTP host>


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/kCSArticleDetail?id=kA10g000000Cm0R&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FkCSArticleDetail

Choose Language