IP 地址、网络掩码和默认网关在ZTP设备
22328
Created On 10/21/22 14:57 PM - Last Modified 05/12/23 03:10 AM
Symptom
- '显示系统信息' 显示IP地址、网络掩码和默认网关在ZTP设备:
> show system info hostname: ZTP-Firewall ip-address: unknown default-gateway: unknown netmask: unknown ip-assignment: dhcp ipv6-address: unknown ipv6-link-local-address: unknown ipv6-default-gateway: mac-address: unknown time: Thu Sep 15 16:16:21 2022 uptime: 1 days, 7:18:17 family: 400 model: PA-440 cloud-mode: non-cloud sw-version: 10.2.2-h2 global-protect-client-package-version: 0.0.0 device-dictionary-version: 57-348 device-dictionary-release-date: 2022/09/02 07:22:54 CEST app-version: 8617-7553 app-release-date: 2022/09/08 03:25:11 CEST av-version: 4207-4720 av-release-date: 2022/09/15 13:04:38 CEST threat-version: 8617-7553 threat-release-date: 2022/09/08 03:25:11 CEST wf-private-version: 0 wf-private-release-date: unknown url-db: paloaltonetworks wildfire-version: 699021-702368 wildfire-release-date: 2022/09/15 16:12:09 CEST wildfire-rt: Enabled url-filtering-version: 20220915.20217 global-protect-datafile-version: unknown global-protect-datafile-release-date: unknown global-protect-clientless-vpn-version: 0 global-protect-clientless-vpn-release-date: logdb-version: 10.2.0 dlp: dlp-3.0.1-c9 platform-family: 400 vpn-disable-mode: off multi-vsys: off zero-touch-provisioning: Enabled operational-mode: normal advanced-routing: off device-certificate-status: Valid - GUI:仪表板 > 一般信息:
- 管理界面信息显示正确的设置:
> show interface management ------------------------------------------------------------------------------- Name: Management Interface Link status: Runtime link speed/duplex/state: 1000/full/up Configured link speed/duplex/state: auto/auto/auto MAC address: Port MAC address 8c:36:7a:20:3a:5c Ip address: 192.168.1.2 Netmask: 255.255.255.0 Default gateway: 192.168.1.1 - 没有为 ethernet1/1 接口应用任何配置
Environment
- 任何帕洛阿尔托网络firewall在ZTP(零接触配置)模式
- 支持的 PAN-OS
Cause
- 未知值出现在该选项上,因为ZTP防火墙使用 ethernet1/1 进行管理。
- '显示系统信息' 将显示在 ethernet1/1 上配置的数据。
Resolution
- 配置ethernet1/1接口设置;这些值将反映为MGT上的地址CLI和GUI.
OR
- 停用ZTP模式。 参考使用CLI为了ZTP任务