PCNSE · Question #6
A host attached to ethernet1/3 cannot access the internet. The default gateway is attached to ethernet1/4. After troubleshooting. It is determined that traffic cannot pass from the ethernet1/3 to…
The correct answer is B. Interface ethernet1/3 is in Layer 2 mode and interface ethernet1/4 is in Layer 3 mode. PAN-OS interfaces must operate in compatible modes for traffic to flow between them through the firewall's routing engine. If ethernet1/3 is in Layer 2 mode and ethernet1/4 is in Layer 3 mode, they belong to fundamentally different logical constructs - a Layer 2 segment cannot…
Question
A host attached to ethernet1/3 cannot access the internet. The default gateway is attached to ethernet1/4. After troubleshooting. It is determined that traffic cannot pass from the ethernet1/3 to ethernet1/4. What can be the cause of the problem?
Options
- ADHCP has been set to Auto.
- BInterface ethernet1/3 is in Layer 2 mode and interface ethernet1/4 is in Layer 3 mode.
- CInterface ethernet1/3 and ethernet1/4 are in Virtual Wire Mode.
- DDNS has not been properly configured on the firewall
How the community answered
(35 responses)- A17% (6)
- B71% (25)
- C3% (1)
- D9% (3)
Explanation
PAN-OS interfaces must operate in compatible modes for traffic to flow between them through the firewall's routing engine. If ethernet1/3 is in Layer 2 mode and ethernet1/4 is in Layer 3 mode, they belong to fundamentally different logical constructs - a Layer 2 segment cannot route traffic to a Layer 3 interface without proper bridging or VLAN configuration. This mismatch would prevent traffic from passing between the interfaces. Option A (DHCP Auto) would affect IP assignment but not inter-interface routing. Option C (Virtual Wire) is incorrect because Virtual Wire mode is a valid pass-through configuration that actually does allow traffic to pass between two paired interfaces. Option D (DNS misconfiguration) would cause name resolution failures, not complete traffic blockage between interfaces.
Topics
Community Discussion
No community discussion yet for this question.