PSE-PLATFORM · Question #112
The company's Panorama server (IP 10.10.10.5) is not able to manage a firewall that was recently deployed. The firewall's dedicated management port is being used to connect to the management network.
The correct answer is B. show panoramas-status D. topdump filter "host 10.10.10.5. Explanation/Reference: B: The show panorama-status command shows the Panorama connection status. The following command shows information about the Panorama connection. username@hostname> show panorama-status Panorama Server 1 : 10.1.7.90 username@hostname> The Managed Devices sho
Question
The company's Panorama server (IP 10.10.10.5) is not able to manage a firewall that was recently deployed. The firewall's dedicated management port is being used to connect to the management network. Which two commands may be used to troubleshoot this issue from the CLI of the new firewall? (Choose two)
Options
- Atest panoramas-connect 10.10.10.5
- Bshow panoramas-status
- Cshow arp all I match 10.10.10.5
- Dtopdump filter "host 10.10.10.5
- Edebug dataplane packet-diag set capture on
How the community answered
(50 responses)- A12% (6)
- B78% (39)
- C8% (4)
- E2% (1)
Explanation
Explanation/Reference: B: The show panorama-status command shows the Panorama connection status. The following command shows information about the Panorama connection. username@hostname> show panorama-status Panorama Server 1 : 10.1.7.90 username@hostname> The Managed Devices show not connected to Panorama and are not able to establish a new connection to Panorama. The Packet Capture on Panorama Management Interface shows SYN packets received from devices on port 3978, but no SYN ACK is sent from Panorama. > tcpdump filter "port 3978" > view-pcap mgmt-pcap mgmt.pcap https://live.paloaltonetworks.com/t5/Management-Articles/Managed-Devices-Unable-to-Establish-Connections-to-Panorama/ta-p/53248 5.1_PAN-OS-5.0.pdf
Topics
Community Discussion
No community discussion yet for this question.