13. Understanding and Configuring Interfaces (Layer-3 Interface) | Palo Alto firewall training

[@SujayDey-dy1cx]

Dear Sir, i have configured, interface 1/2 layer 3 interface for internal network and configured interface 1/3 layer 2 interface for security camera. Interface 1/2 and Interface 1/3 is connected with switch in trunk mode and i have configure svi for interface 1/3. Now, i can use internet and i can communicate with Interface 1/2 from Interface 1/3 but i can't communicate from interface 1/2 to 1/3 interface. i have made bi-directional security policy as well. where i have allowed all any. But still i can't communicate from interface 1/2 to interface 1/3 network. Please suggest the solution.

[@bharatrajwanshi4868]

Hi..It's hard to tell from few info but I am guessing you have created L2 Vlan on Switch and device behind the L2 Vlan using Gateway IP configured on firewall interface 1/2, but it's failing to connect back to devices behind 1/3 interface. You may need to create a NAT (PAT) using source from subnet behind L2 Vlan and PAT with 1/3 interface IP. On firewall there could be several reasons what you can find in the logs Thanks