Type Codes - B:BGP D:Connected O:OSPF R:RIP S:Static Cost - Dist/Metric PORT-VLAN 2, Name RouterP2P, Priority level0, Spanning tree Off Ve 11 10.1.1.1 YES manual up up default-vrf Interface IP-Address OK? Method Status Protocol VRF On paper it looks to me like everything is correct. I haven't tested any other kinds of traffic because there are no firewall rules in place yet other than allowing pings on the PA's management interface, and this is exactly as far as I got when I was ripped away suddenly. Everything behind the Brocade can ping 172.16.0.6, and the Brocade can ping itself at that address, but cannot ping 172.16.0.5. Everything behind the Palo Alto can ping 172.16.0.5, and the PA can ping itself, but cannot ping 172.16.0.6. The routes for both appear in both routing tables as directly attached, as they should.
On the Brocade, I have a virtual router-interface in VLAN 2, ve2, assigned IP 172.16.0.6/30. On the Palo Alto, I have configured a sub-interface tagged VLAN 2, assigned IP 172.16.0.5/30. I have a Palo Alto firewall, connected to a Brocade ICX-7450 running layer 3 code. I had to leave the office in a hurry this evening to pick up my kid, so I'm not even sure I won't solve it the first thing when I get back in the morning, but I figured I'd post here in case there are any gotchas. This is a question so simple I must be missing something.
