Saturday, July 3, 2021

Palo Alto firewall - How to configure the Management IP via CLI

This article describes how to configure the Management Interface IP on a Palo Alto firewall via CLI/console.

Step 1. Login to the device with the default username and password (admin/admin).

Step 2. Enter configuration mode using the command configure.


Step 3. Change the system setting to static (DHCP is enabled by default).

set deviceconfig system type static

admin@PA-220#set deviceconfig system type static

Step 4. Use the following command to set the IP address of the management interface:

admin@PA-220#set deviceconfig system ip-address <ip address> netmask <netmask> default-gateway <default gateway> dns-setting servers primary <DNS ip address>

# set deviceconfig system ip-address netmask default-gateway dns-setting servers primary

Step 5. Commit the changes using the command commit


Step 6. Exit configuration mode by using the command exit and then confirm the configurations by running the command show interface management within configuration mode.

admin@PA-220>show interface management
Name: Management Interface
Link status:
  Runtime link speed/duplex/state: 10000/full/up
  Configured link speed/duplex/state: auto/auto/auto
MAC address:
  Port MAC address 00:50:56:81:ad:e6

Ip address:
Default gateway:
Ipv6 address: unknown
Ipv6 link local address: fe80::250:56ff:fe81:ade6/64
Ipv6 default gateway:

No comments: