PCNSE · Question #176
A network security engineer for a large company has just installed a PA-5060 Firewall to isolate the company's PCI environment from its production network. The company's engineers made configuration…
The correct answer is C. show interface ethernet1/1 D. show interface logical. To troubleshoot a suspected interface misconfiguration on a specific Ethernet port like 1/1, the show interface ethernet1/1 command provides detailed physical and logical status, while show interface logical reveals the overall logical interface configuration and status which…
Question
A network security engineer for a large company has just installed a PA-5060 Firewall to isolate the company's PCI environment from its production network. The company's engineers made configuration changes to the switches on both network segments, and connected them to the new firewall. Soon after the cutover, however, users began to complain about latency and some servicers stopped communicating. There are no security policies that deny traffic between the two networks segments. You suspect that there is an interface misconfiguration on Ethernet 1/1. Which two commands should be used to troubleshoot the issue? (Choose two)
Options
- Ashow interface hardware
- Bshow interface management
- Cshow interface ethernet1/1
- Dshow interface logical
How the community answered
(24 responses)- A17% (4)
- B8% (2)
- C75% (18)
Why each option
To troubleshoot a suspected interface misconfiguration on a specific Ethernet port like 1/1, the `show interface ethernet1/1` command provides detailed physical and logical status, while `show interface logical` reveals the overall logical interface configuration and status which could impact routing or forwarding.
The `show interface hardware` command displays hardware-level information for all interfaces but doesn't provide specific logical configuration or detailed physical link status for a single interface like `show interface ethernet1/1`.
The `show interface management` command is used to view the status of the management interface (MGT), which is typically separate from data plane interfaces like ethernet1/1 and irrelevant for troubleshooting traffic flow between network segments.
The `show interface ethernet1/1` command provides specific details about the physical and data link layer status of Ethernet interface 1/1, including link state, speed, duplex, and error counters, which are crucial for identifying misconfigurations.
The `show interface logical` command displays the logical configuration of all interfaces, including their assigned zones, IP addresses, and virtual router associations, which helps verify if the interface is correctly configured for routing and forwarding traffic.
Concept tested: Troubleshooting interface configuration
Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-cli-reference/show-commands/show-interface.html
Topics
Community Discussion
No community discussion yet for this question.