Option1: Configure the management IP address from the command-line interface (CLI).
Access the console CLI.
The default login credentials are:
Bear in mind that the password will not be displayed when you type it in.
You may be prompted to set a new default password.
At this stage, you can check the current IP address and setup of the Palo Alto firewall.
> show system info
Enter configuration mode.
Configure the interface to accept a static IP address
#set deviceconfig system type static
Now set the IP address of the management interface:
# set deviceconfig system ip-address <ip address> netmask <netmask> default-gateway
<default gateway> dns-setting servers primary <DNS ip address>
Commit the changes for them to take effect.
Use “exit” to exit the configuration mode after the commit is complete.
Type https ://<ip address> into your browser in order to gain access to the WebGUI.
Note: Unless manually changed or DHCP assigned, the default IP is 192.168.1.1.
You will likely get a certificate warning.
This can be bypassed by clicking on advanced (I am using Chrome here) and then clicking proceed.
Option 2: Configure the management IP address from the Web GUI using your username and password.
Unless changed, the default login credentials are:
Navigate to Device > Setup > Interfaces > Management, Click on the setup icon on the right-hand corner and configure the Management Interface IP.
Navigate to Device > Setup > Services, Click the edit ‘cog’ and add a DNS server.
Click OK and click on the commit button in the upper right to commit the changes.
Note: If you change the management IP address, and commit, you will never see the commit complete, as the IP address will take effect at 99% and you will be disconnected.
Type in the new IP address within the browser to connect back to the Web GUI.
You can verify that DNS is working by pinging a domain name, or by tracing a route to a site, both via the command-line interface (CLI).
ping host www.google.co.uk
traceroute hose www.google.co.uk
Use CTRL+C to break the cycle of continuous pings.
Thank you for visiting my tutorial page. For more tutorials, be sure to check IMCK Training for the latest updates.