Skip to content

type=gratuitous‐arp

Sven Waschkut edited this page Oct 6, 2023 · 1 revision

You are preparing a cutover from previous Vendor Firewall to Palo Alto Networks Firewall?

  • Palo Alto Networks recommend to migrate like by like, which mean:
  • new firewall will have the same production Interface IPs as your previous firewall

To have a smooth cutover all Routing/Switch devices around your new firewall need to be informed about new ARP information during your cutover.

This script is preparing all the test arp gratuitous commands for you:

test commands

  • test arp gratuitous ip 10.48.203.253 interface ethernet1/1

  • test arp gratuitous ip 10.3.0.254 interface ethernet1/3

  • test arp gratuitous ip 10.0.0.254 interface ethernet1/2.1

  • test arp gratuitous ip 10.6.0.254 interface ethernet1/2.2

offline Mode

pan-os-php type=gratuitous-arp in=configFile.xml test

online Mode

  • prepare commands: pan-os-php type=gratuitous-arp in=api://MGMT-IP test
  • directly send all commands: pan-os-php type=gratuitous-arp in=api://MGMT-IP user=USERNAME pw=PASSWORD