How to view IP Addresses in an address object via the CLI

How to view IP Addresses in an address object via the CLI

62315
Created On 12/10/19 00:39 AM - Last Modified 08/27/20 01:46 AM


Objective


How to use the CLI  to view all the IP addresses configured in an address object.

Environment


  • Any Palo Alto Firewall.
  • Any PAN-OS.


Procedure


  1. The CLI command "show running security-policy-addresses" displays all the IP addresses of an address object referenced in a security policy
  2. To view any single address object and and their associated IP addresses, use "show address" command from config mode.
Example:
admin@Lab> show running security-policy-addresses
<output omitted>
"Address-object; index: 3" {
        source 1.1.1.1;
        destination any;
}
<output omitted>

admin@Lab>configure
Entering configuration mode
admin@Lab# show address one   => using ? after show address will display all the configured address objects
one {
  ip-netmask 1.1.1.1/32;
}
admin@Lab# exit

 


Additional Information


Note: The cli command "show cli pager off" and "show cli pager on" command can be used to turn off and turn on the page display.

Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/kcsArticleDetail?id=kA10g000000PNn4&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FkcsArticleDetail

Choose Language