Palo Alto firewall - How to configure the Management IP via CLI

This article describes how to configure the Management Interface IP on a Palo Alto firewall via CLI/console.

Step 1. Login to the device with the default username and password (admin/admin).

Step 2. Enter configuration mode using the command configure.

admin@PA-220>configure

Step 3. Change the system setting to static (DHCP is enabled by default).

set deviceconfig system type static

admin@PA-220#set deviceconfig system type static

Step 4. Use the following command to set the IP address of the management interface:

admin@PA-220#set deviceconfig system ip-address <ip address> netmask <netmask> default-gateway <default gateway> dns-setting servers primary <DNS ip address>

# set deviceconfig system ip-address 10.1.1.1 netmask 255.255.255.0 default-gateway 10.1.1.2 dns-setting servers primary 8.8.8.8

Step 5. Commit the changes using the command commit

admin@PA-220#commit

Step 6. Exit configuration mode by using the command exit and then confirm the configurations by running the command show interface management within configuration mode.

admin@PA-220>show interface management

-------------------------------------------------------------------------------

Name: Management Interface

Link status:

  Runtime link speed/duplex/state: 10000/full/up

  Configured link speed/duplex/state: auto/auto/auto

MAC address:

  Port MAC address 00:50:56:81:ad:e6

Ip address: 10.1.1.1

Netmask: 255.255.255.0

Default gateway: 10.1.1.2

Ipv6 address: unknown

Ipv6 link local address: fe80::250:56ff:fe81:ade6/64

Ipv6 default gateway:

-------------------------------------------------------------------------------