PCNSE · Question #135
A network security engineer for a large company has just installed a PA-5060 Firewall to isolate the company's PCI environment from its production network. The company's network engineers made…
The correct answer is B. show interface ethernet1/1 C. show interface logical. To diagnose latency and communication issues stemming from a suspected interface misconfiguration on ethernet1/1, you should use commands to inspect the specific physical interface and its logical configurations.
Question
A network security engineer for a large company has just installed a PA-5060 Firewall to isolate the company's PCI environment from its production network. The company's network engineers made configuration changes to the switches on both network segments, and connected them to the new firewall. Soon after the cutover, however, users began to complain about latency and some servers stopped communicating. There are no security policies that deny traffic between the two network segments. You suspect that there is an interface misconfiguration on ethernet1/1. Which two commands should be used to troubleshoot the issue? (Choose two.)
Options
- Ashow interface management
- Bshow interface ethernet1/1
- Cshow interface logical
- Dshow interface hardware
How the community answered
(20 responses)- A5% (1)
- B80% (16)
- D15% (3)
Why each option
To diagnose latency and communication issues stemming from a suspected interface misconfiguration on `ethernet1/1`, you should use commands to inspect the specific physical interface and its logical configurations.
The `show interface management` command specifically displays the status of the firewall's management interface, which is generally not involved in data plane traffic forwarding between network segments.
The `show interface ethernet1/1` command displays the physical and operational status of a specific interface, including link status, speed, duplex, and packet counters, which are crucial for identifying physical layer issues or misconfigurations affecting traffic flow.
The `show interface logical` command provides details about all logical interfaces, including subinterfaces and their assigned zones, IP addresses, and virtual routers, which helps in identifying errors in network segmentation or routing crucial for inter-segment communication.
The `show interface hardware` command provides low-level hardware details that are less directly useful for troubleshooting basic interface misconfigurations related to network connectivity and traffic flow than the operational status of a specific interface.
Concept tested: Firewall interface troubleshooting commands
Source: https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/troubleshooting/monitor-interfaces/monitor-physical-interfaces
Topics
Community Discussion
No community discussion yet for this question.