Comments (5)
narayan-iyengar
commented on July 25, 2024
Try rebooting the firewall..and see if that helps
…--
/narayan
From: Schizamp <[email protected]>
Reply-To: PaloAltoNetworks/aws-transit-vpc <[email protected]>
Date: Tuesday, August 14, 2018 at 8:47 AM
To: PaloAltoNetworks/aws-transit-vpc <[email protected]>
Cc: Subscribed <[email protected]>
Subject: [PaloAltoNetworks/aws-transit-vpc] Management interface is attached to elastic IP, PA did not recognize two NICs (#39)
Wondering if anyone else is seeing this, am following the documentation closely. Was able to run the CFTs and link a subscriber VPC. The PAGroup template ran, spun up two nodes with two ENIs, one in an untrust subnet with elastic IP attached, another in a trusted subnet. When I log into the Palo Alto device, it has only recognized one interface, the public interface, and has associated management to it. I can browse to the web UI from the internet.
[Image removed by sender. image]<https://urldefense.proofpoint.com/v2/url?u=https-3A__user-2Dimages.githubusercontent.com_35105617_44092517-2Daa66f47c-2D9f9e-2D11e8-2D96fa-2D29a2f026470b.png&d=DwMCaQ&c=V9IgWpI5PvzTw83UyHGVSoW3Uc1MFWe5J8PTfkrzVSo&r=yaPPNRHFJOEqZ9-bfG64oiDWvBigyIWTnqkw0GQeLyU&m=rjEzxbwIOg8GFFvF1t6UiGzu1_0QyZPFD9zzw1fsPmg&s=9XTI47lwuM63LjXcBHkLMihJOxqONSByF-OfPF_hnmg&e=>
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub<https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_PaloAltoNetworks_aws-2Dtransit-2Dvpc_issues_39&d=DwMCaQ&c=V9IgWpI5PvzTw83UyHGVSoW3Uc1MFWe5J8PTfkrzVSo&r=yaPPNRHFJOEqZ9-bfG64oiDWvBigyIWTnqkw0GQeLyU&m=rjEzxbwIOg8GFFvF1t6UiGzu1_0QyZPFD9zzw1fsPmg&s=-qTnLs4NCXzx81sRbWlkgXPsNM3I3S-PeYpHJlyppyw&e=>, or mute the thread<https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_notifications_unsubscribe-2Dauth_ARFcacK6DsJ-2DH6tYxKK-5Fkh4Mag3rctBAks5uQsbpgaJpZM4V8Xna&d=DwMCaQ&c=V9IgWpI5PvzTw83UyHGVSoW3Uc1MFWe5J8PTfkrzVSo&r=yaPPNRHFJOEqZ9-bfG64oiDWvBigyIWTnqkw0GQeLyU&m=rjEzxbwIOg8GFFvF1t6UiGzu1_0QyZPFD9zzw1fsPmg&s=nOpdXGFHPbw0KIiwX5-F_75eFaA9-ON3rqsGxmLqSKE&e=>.
from aws-transit-vpc.
Schizamp
commented on July 25, 2024
Will try that. Also found that in the Powerpoint deployment guide, it says to "Verify FW1 Interfaces and default route. Double check that your e1/1 has the correct IP/Mask." Since mine does not, it only has the secondary ENI IP that has the EIP attached, I'm guessing I need to change this. It seems odd to call it out specifically in the deployment guide if there wasn't an issue with this.
from aws-transit-vpc.
Schizamp
commented on July 25, 2024
The second interface did not light up. @narayan-iyengar did you experience the same issue or have to update the IP/mask on eth1/1?
from aws-transit-vpc.
narayan-iyengar
commented on July 25, 2024
Never seen this issue. Was just a guess.
Do you have two enis ?
…--
Thanks,
/narayan
________________________________
From: Schizamp <[email protected]>
Sent: Wednesday, August 15, 2018 9:15:01 AM
To: PaloAltoNetworks/aws-transit-vpc
Cc: Narayan Iyengar; Mention
Subject: Re: [PaloAltoNetworks/aws-transit-vpc] Management interface is attached to elastic IP, PA did not recognize two NICs (#39)
The second interface did not light up. @narayan-iyengar<https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_narayan-2Diyengar&d=DwMCaQ&c=V9IgWpI5PvzTw83UyHGVSoW3Uc1MFWe5J8PTfkrzVSo&r=yaPPNRHFJOEqZ9-bfG64oiDWvBigyIWTnqkw0GQeLyU&m=phLFFNwHHHWKDyyq4u0i3h_r0uB6xJVKbZ2GfSB1SOA&s=TKzTi_GgdRYtB8hRAOnvvEeirZmRhfR-gZU_owU4PqE&e=> did you experience the same issue or have to update the IP/mask on eth1/1?
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub<https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_PaloAltoNetworks_aws-2Dtransit-2Dvpc_issues_39-23issuecomment-2D413193091&d=DwMCaQ&c=V9IgWpI5PvzTw83UyHGVSoW3Uc1MFWe5J8PTfkrzVSo&r=yaPPNRHFJOEqZ9-bfG64oiDWvBigyIWTnqkw0GQeLyU&m=phLFFNwHHHWKDyyq4u0i3h_r0uB6xJVKbZ2GfSB1SOA&s=aWR-JsSpUnx4WsVQUV3N7XlNJumMP4TmJf_en3-jFQU&e=>, or mute the thread<https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_notifications_unsubscribe-2Dauth_ARFcaRFMUIf2MrcYqiroInpOY8h-5FWp6lks5uRB7VgaJpZM4V8Xna&d=DwMCaQ&c=V9IgWpI5PvzTw83UyHGVSoW3Uc1MFWe5J8PTfkrzVSo&r=yaPPNRHFJOEqZ9-bfG64oiDWvBigyIWTnqkw0GQeLyU&m=phLFFNwHHHWKDyyq4u0i3h_r0uB6xJVKbZ2GfSB1SOA&s=4z2OMPDPl04KEEPpWdP3jzXntCTIbjaGlgecKkJp5Wk&e=>.
from aws-transit-vpc.
Schizamp
commented on July 25, 2024
Found out that the management interface (eth0) is not listed on this page, it's under Devices > Interfaces. I removed the Management Profile DataPlane from eth1 and was able to make the management interface private. I think this was more of an issue of me not being a network guy or knowing Palo Alto. I'll go ahead and close.
from aws-transit-vpc.
Related Issues (20)
- 2x Transit VPCs in the same account? HOT 2
- Stack PaGroup58 already exists HOT 2
- Is it possible to combine the VPC template with autoscaling firewall template sothat autoscaling with ipsec tunnels is supported?
- fectchFromSubscriberQueueLambda fails on empty queue
- transit vpc doesn't create a VPN connections HOT 3
- PA-Groups are exausted even though no VPNs have been configured HOT 4
- Deployment guide modification
- Deployment failed in regions without FIFO queues support HOT 4
- Limit on number of VPC's that Paloalto can connect to?
- CF Stack initializeTransitAccount.json too large HOT 1
- Palo password hash in bootrap.xml
- Cloud Formation Stack updates not updating Transit Dynamo Tables HOT 1
- TransitVPC CF stack parms must include transit account, if transit account also a subscribing account HOT 1
- Must accepting Maketplace EULA or Palo Group creation will time out HOT 2
- Secondary Account VPC Issue HOT 2
- CF JSON to YML? HOT 5
- fetchVpnServerDetails returns with PaGroup exhausted HOT 1
- Specifying Specific ASNs for the Customer Gateway
- Use BYOL HOT 2
- AMI Issues / EULA Issue? HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from aws-transit-vpc.