How to Configure the Management Interface IP

How to Configure the Management Interface IP

1202254
Created On 09/25/18 18:02 PM - Last Modified 09/15/22 21:27 PM


Symptom


Configuring the Management Interface IP on a PAN firewall

Environment


  • Palo Alto Networks Firewalls 
  • Supported PAN-OS.
  • Initial Configuration.


Resolution


Before starting this procedure, please make sure a connection can be made via a console cable to the Palo Alto Networks device. 

CLI

  1. Login to the device with the default username and password (admin/admin). 
  2. Enter configuration mode using the  command configure
  3. Change the system setting to static (DHCP is enabled by default) 
admin@fw# set deviceconfig system type static
  1. Use the following command to set the IP address of the management interface:
admin@fw# set deviceconfig system ip-address <ip address> netmask <netmask> default-gateway <default gateway> dns-setting servers primary <DNS ip address>
  1. Commit the changes using the command commit
  2. Exit configuration mode by using the command exit and then confirm the configurations by running the command show interface management within configuration mode
admin@fw> show interface management

-------------------------------------------------------------------------------
Name: Management Interface
Link status:
  Runtime link speed/duplex/state: 10000/full/up
  Configured link speed/duplex/state: auto/auto/auto
MAC address:
  Port MAC address 00:50:56:81:ad:e6

Ip address: 10.46.196.118
Netmask: 255.255.255.192
Default gateway: 10.46.196.65
Ipv6 address: unknown
Ipv6 link local address: fe80::250:56ff:fe81:ade6/64
Ipv6 default gateway:
-------------------------------------------------------------------------------

 

WebGUI:

Please use https://<ip address> to gain access to the WebGUI. Default IP is 192.168.1.1.

  1. Navigate to Device > Setup > Interfaces > Management
    The management interface of a firewall running PAN-OS 9.0
  2. Navigate to Device > Setup > Services, Click edit and add a DNS server.
    The DNS Settings of a firewall running PAN-OS 9.0
  3. Click OK and click on the commit button in the upper right to commit the changes.
    Note: When changing the management IP address and committing, you will never see the commit operation complete. This is because the new management IP address will take effect at 99% resulting in a disconnected GUI session. You will have to manually change the URL address to the new management IP to continue using the WebGUI.



Additional Information


For instructions on how to make a console connection, please see the PAN-OS CLI Quick Start, Access the CLI

To view the settings of IP address, DNS etc, Use "show deviceconfig system" command in the configuration mode.
admin@Lab-VM> set cli config-output-format set
admin@Lab-VM> configure
Entering configuration mode
[edit]
admin@Lab196-97-PA-VM# show deviceconfig system
set deviceconfig system ip-address 10.46....
set deviceconfig system netmask 255.255.255.192
set deviceconfig system update-server updates.paloaltonetworks.com
.......
set deviceconfig system default-gateway 10.46....
set deviceconfig system dns-setting servers primary 8.8.8.8
set deviceconfig system dns-setting servers secondary 4.2.2.1
.....
[edit]
admin@Lab-VM# exit
Exiting configuration mode


 


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClN7CAK&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language