Saturday, July 3, 2021

Palo Alto firewall - How to configure the Management IP via CLI

This article describes how to configure the Management Interface IP on a Palo Alto firewall via CLI/console.

Step 1. Login to the device with the default username and password (admin/admin).

Step 2. Enter configuration mode using the command configure.

[email protected]>configure

Step 3. Change the system setting to static (DHCP is enabled by default).

set deviceconfig system type static

[email protected]#set deviceconfig system type static

Step 4. Use the following command to set the IP address of the management interface:

[email protected]#set deviceconfig system ip-address <ip address> netmask <netmask> default-gateway <default gateway> dns-setting servers primary <DNS ip address>

# set deviceconfig system ip-address netmask default-gateway dns-setting servers primary

Step 5. Commit the changes using the command commit

[email protected]#commit

Step 6. Exit configuration mode by using the command exit and then confirm the configurations by running the command show interface management within configuration mode.

[email protected]>show interface management
Name: Management Interface
Link status:
  Runtime link speed/duplex/state: 10000/full/up
  Configured link speed/duplex/state: auto/auto/auto
MAC address:
  Port MAC address 00:50:56:81:ad:e6

Ip address:
Default gateway:
Ipv6 address: unknown
Ipv6 link local address: fe80::250:56ff:fe81:ade6/64
Ipv6 default gateway:

No comments: