How to Configure a Layer 3 Interface to act as a Management Port via CLI

• PAN-OS

Steps

1. Access the firewall CLI from the console or SSH.
2. Enter Configuration mode:

   > configure

3. Create a Management Profile and allow HTTPS, SSH, or any other appropriate options.  Click the tab to view command options

   #set network profiles interface-management-profile <name> http {no | yes} | https {no | yes} | ping {no | yes} | response-pages {no | yes} | snmp {no | yes} | ssh {no | yes} | telnet {no | yes}

4. Apply the profile to the interface and assign an IP address.

   #set network interface ethernet ethernet1/9 link-state auto link-duplex auto layer3 interface-management-profile test ip 10.10.10.10/24

5. Apply the interface to a virtual router

   #set network virtual-router VR1 interface ethernet1/9

6. Apply the interface to a zone.

   #set zone DMZ network layer3 ethernet1/9

7. Commit

   #commit