type=gratuitous‐arp

Jump to bottom

Sven Waschkut edited this page Oct 6, 2023 · 1 revision

You are preparing a cutover from previous Vendor Firewall to Palo Alto Networks Firewall?

Palo Alto Networks recommend to migrate like by like, which mean:
new firewall will have the same production Interface IPs as your previous firewall

To have a smooth cutover all Routing/Switch devices around your new firewall need to be informed about new ARP information during your cutover.

This script is preparing all the test arp gratuitous commands for you:

test commands

test arp gratuitous ip 10.48.203.253 interface ethernet1/1
test arp gratuitous ip 10.3.0.254 interface ethernet1/3
test arp gratuitous ip 10.0.0.254 interface ethernet1/2.1
test arp gratuitous ip 10.6.0.254 interface ethernet1/2.2

offline Mode

pan-os-php type=gratuitous-arp in=configFile.xml test

online Mode

prepare commands: pan-os-php type=gratuitous-arp in=api://MGMT-IP test
directly send all commands: pan-os-php type=gratuitous-arp in=api://MGMT-IP user=USERNAME pw=PASSWORD