nerdexam
Palo_Alto_Networks

PCNSE · Question #6

A host attached to ethernet1/3 cannot access the internet. The default gateway is attached to ethernet1/4. After troubleshooting. It is determined that traffic cannot pass from the ethernet1/3 to…

The correct answer is B. Interface ethernet1/3 is in Layer 2 mode and interface ethernet1/4 is in Layer 3 mode. PAN-OS interfaces must operate in compatible modes for traffic to flow between them through the firewall's routing engine. If ethernet1/3 is in Layer 2 mode and ethernet1/4 is in Layer 3 mode, they belong to fundamentally different logical constructs - a Layer 2 segment cannot…

Submitted by rachelw· Apr 18, 2026Configuration Troubleshooting

Question

A host attached to ethernet1/3 cannot access the internet. The default gateway is attached to ethernet1/4. After troubleshooting. It is determined that traffic cannot pass from the ethernet1/3 to ethernet1/4. What can be the cause of the problem?

Options

  • ADHCP has been set to Auto.
  • BInterface ethernet1/3 is in Layer 2 mode and interface ethernet1/4 is in Layer 3 mode.
  • CInterface ethernet1/3 and ethernet1/4 are in Virtual Wire Mode.
  • DDNS has not been properly configured on the firewall

How the community answered

(35 responses)
  • A
    17% (6)
  • B
    71% (25)
  • C
    3% (1)
  • D
    9% (3)

Explanation

PAN-OS interfaces must operate in compatible modes for traffic to flow between them through the firewall's routing engine. If ethernet1/3 is in Layer 2 mode and ethernet1/4 is in Layer 3 mode, they belong to fundamentally different logical constructs - a Layer 2 segment cannot route traffic to a Layer 3 interface without proper bridging or VLAN configuration. This mismatch would prevent traffic from passing between the interfaces. Option A (DHCP Auto) would affect IP assignment but not inter-interface routing. Option C (Virtual Wire) is incorrect because Virtual Wire mode is a valid pass-through configuration that actually does allow traffic to pass between two paired interfaces. Option D (DNS misconfiguration) would cause name resolution failures, not complete traffic blockage between interfaces.

Topics

#Palo Alto Interface Modes#Network Troubleshooting#Layer 2/3 Networking#Traffic Forwarding

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice