How to Use the CLI to change GUI Access

How to Use the CLI to change GUI Access

109905
Created On 09/25/18 17:58 PM - Last Modified 06/08/23 02:36 AM


Resolution


If a mistake is made when creating an allow list for the GUI and access to the web interface is no longer possible, it is possible to make changes via the CLI to change the allow list and make the necessary corrections

 

To change the allowed subnets (or IP addreses)

  1. From the console, run the command
    • configure
    • delete deviceconfig system permitted-ip <subnet to be removed>
      • Tip: The TAB key can be used after typing "permitted-ip" to view the current list of allowed IP addresses
  2. Add the subnet that needs access to the GUI with the command set deviceconfig system permitted-ip <subnet to be added>
    • set deviceconfig system permitted-ip 192.168.1.0/24
    • commit

 

owner: shasnain



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClLqCAK&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language