How to Configure a Layer 3 Interface to act as a Management Port via CLI

How to Configure a Layer 3 Interface to act as a Management Port via CLI

96040
Created On 09/25/18 18:00 PM - Last Modified 06/06/23 19:42 PM


Resolution


Steps

  1. Access the firewall from the console.
  2. Enter Configuration mode:
  3. Create a Management Profile and allow HTTPS and SSH and any other appropriate options.  Hit tab to view command options

#set network profiles interface-management-profile <name> http {no | yes} | https {no | yes} | ping {no | yes} | response-pages {no | yes} | snmp {no | yes} | ssh {no | yes} | telnet {no | yes}

  1. Apply the profile to the interface and assign an IP address.

#set network interface ethernet ethernet1/9 link-state auto link-duplex auto layer3 interface-management-profile test ip 10.10.10.10/24

  1. Apply the interface to a virtual router

#set network virtual-router VR1 interface ethernet1/9

  1. Apply the interface to a zone.

#set zone DMZ network layer3 ethernet1/9

  1. Commit

 

owner: skrall



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClMfCAK&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language