#PALO ALTO SHOW MAC ADDRESS TABLE SOFTWARE#

See the user-id agent version from the CLI on Palo: > clear user-cache ip //user-cache (Clear dataplane user cache) > clear user-cache-mp ip //user-cache-mp (Clear management plane user cache) The following commands can be used to clear and see the user to IP mappings: > debug user-id reset group-mapping AD_Group_Mapping The group-mappings on the LDAP profile can be reset with the following CLI command: > show user group name cn=firewall-mf-rave-pcs,ou=_groups,dc=iee,dc=mfh To use the needed group in the previous step: The lists for every group can be read using the following CLI command: To see the groups that the firewall knows about: >test authentication authentication-profile AD username iee ungera password

>show high-availability state-synchronisationД¬lear session all filter application skypeД¬lear session all filter source 192.168.51.71Д¬lear session all filter destination 8.8.8.8 Shows the synchronisation state to the peer device: Shows the high-availability state information: Shows the high-availability information on current device: >request high-availability state functional

>request high-availability sync-to-remote Request high-availability sync-to-remote running-configДЇorce configuration and session synchronisation to peer device:

#PALO ALTO SHOW MAC ADDRESS TABLE SOFTWARE#

> test arp gratuitous ip 10.66.24.139 interface ethernet1/3Дebug software restart process management-server Trigger a Gratuitous ARP (GARP) from a Palo Alto Networks Device: Ping from a dataplane interface to a destination IP address: (# set deviceconfig system ip-address netmask default-gateway dns-setting servers primary )

Palo alto show mac address table