Palo Alto Interface Validation Commands
paloalto cli command
Interface Commands
Check All Interfaces Quickly
show interface all
View Physical Interface Details
show interface ae1
show interface ethernet1/1
Review LACP Status
show lacp aggregated-ethernet ae1
Zone Verification
Show Zone Configuration
show zone
Check Interface-to-Zone Mapping
show interface all | match zone
Show Specific Zone Details
show zone zone-name Trust
Routing Commands
Show Routing Table
show routing route
Check Route to Destination
show routing route destination 10.1.1.1
Show Route Summary
show routing summary
Show Routing Protocols
show routing protocol
show routing protocol bgp peer
show routing protocol ospf neighbor
ARP and Neighbor Tables
Show ARP Cache
show arp all
Show ARP for Interface
show arp ethernet1/1
Show ND Cache (IPv6)
show neighbor all
Interface Counters and Errors
Show Interface Counters
show counter interface ethernet1/1
Show Interface Hardware Info
show interface ethernet1/1 hardware
Clear Interface Counters
clear counter interface all
Error Interpretation
| Counter | Meaning | Possible Cause |
|---|
rx_err | Receive errors | CRC errors, cable issues |
tx_err | Transmit errors | Duplex mismatch, congestion |
drop | Dropped packets | Buffer overflow, rate limiting |
ifin_discards | Input discards | Queue full, policy drops |
ifout_discards | Output discards | Egress congestion |
Troubleshooting Commands
Check Physical Link Status
show interface ethernet1/1 | match state
Show Interface Statistics
show system state filter "hw.ethernet1/1"
Check for Interface Flapping
show log system | match "ethernet1/1"