Saturday, July 3, 2021

Palo Alto firewall - How to configure the Management IP via CLI


This article describes how to configure the Management Interface IP on a Palo Alto firewall via CLI/console.

Step 1. Login to the device with the default username and password (admin/admin).

Step 2. Enter configuration mode using the command configure.

admin@PA-220>configure

Step 3. Change the system setting to static (DHCP is enabled by default).

set deviceconfig system type static

admin@PA-220#set deviceconfig system type static

Step 4. Use the following command to set the IP address of the management interface:

admin@PA-220#set deviceconfig system ip-address <ip address> netmask <netmask> default-gateway <default gateway> dns-setting servers primary <DNS ip address>

# set deviceconfig system ip-address 10.1.1.1 netmask 255.255.255.0 default-gateway 10.1.1.2 dns-setting servers primary 8.8.8.8

Step 5. Commit the changes using the command commit

admin@PA-220#commit

Step 6. Exit configuration mode by using the command exit and then confirm the configurations by running the command show interface management within configuration mode.

admin@PA-220>show interface management
-------------------------------------------------------------------------------
Name: Management Interface
Link status:
  Runtime link speed/duplex/state: 10000/full/up
  Configured link speed/duplex/state: auto/auto/auto
MAC address:
  Port MAC address 00:50:56:81:ad:e6

Ip address: 10.1.1.1
Netmask: 255.255.255.0
Default gateway: 10.1.1.2
Ipv6 address: unknown
Ipv6 link local address: fe80::250:56ff:fe81:ade6/64
Ipv6 default gateway:
-------------------------------------------------------------------------------


No comments:

Post a Comment