Monitor Layer 2 Switch Interfaces
View interface status, MAC address table entries, and Spanning Tree Protocol state
for Layer 2 switch interfaces from the web interface and CLI.
| Where Can I Use This? | What Do I Need? |
|---|
- NGFW (Managed by PAN-OS or Panorama)
|
- PAN-OS 12.2.2 or a later release
- PA-500 Series: PA-550, PA-560
- No additional license required
|
Interface Status
Select to view the operational state of each interface, including link
speed, duplex, and VLAN membership.
From the CLI, use the following commands to view interface status and counters:
| Command | Description |
|---|
| show interface all | Lists all configured interfaces with speed, duplex, state, and
MAC address |
| show interface
interface-name | Shows physical, logical, and hardware counter details for a
specific interface |
| show counter interface
interface-name | Shows CPU-side packet and byte counters |
| show counter rate | Shows counter rates for Layer 2 switch interfaces |
MAC Address Table
The firewall learns MAC addresses dynamically and the learned MAC address table can
be viewed using the CLI. The aging timer is 30 minutes. Use the following commands
to view and clear MAC table entries:
| Command | Description |
|---|
| show mac all | Displays all entries from the software MAC table. |
| show mac vlan | Filters MAC entries by VLAN. |
| clear mac vlan vlan | Removes all MAC entries for a VLAN. |
| clear mac all | Removes all MAC entries. |
| show hardware-mac all | Displays all entries from the hardware MAC table, which contains
the MAC addresses used by the switching silicon. |
| clear hardware-mac all | Clears all entries from the hardware MAC table. |
Spanning Tree Protocol Status
To view Spanning Tree status, select and select the Status tab to view the STP
instance topology, root bridge election result, port roles (Root, Designated, and
Alternate), and port states (Discarding, Learning, and Forwarding).
