Palo Alto Management IP Address

Option1: Configure the management IP address from the command-line interface (CLI).

Access the console CLI.

The default login credentials are:

Username: admin

Password: admin

Bear in mind that the password will not be displayed when you type it in.

You may be prompted to set a new default password.

At this stage, you can check the current IP address and setup of the Palo Alto firewall.

> show system info

Enter configuration mode.

> configure

Configure the interface to accept a static IP address

#set deviceconfig system type static

Now set the IP address of the management interface:

# set deviceconfig system ip-address <ip address> netmask <netmask> default-gateway

<default gateway> dns-setting servers primary <DNS ip address>

Commit the changes for them to take effect.

# commit

Use “exit” to exit the configuration mode after the commit is complete.


Type https ://<ip address> into your browser in order to gain access to the WebGUI.

Note: Unless manually changed or DHCP assigned, the default IP is

You will likely get a certificate warning.

This can be bypassed by clicking on advanced (I am using Chrome here) and then clicking proceed.

Option 2: Configure the management IP address from the Web GUI using your username and password.

Unless changed, the default login credentials are:

Username: admin

Password: admin

Navigate to Device > Setup > Interfaces > Management, Click on the setup icon on the right-hand corner and configure the Management Interface IP.

Navigate to Device > Setup > Services, Click the edit ‘cog’ and add a DNS server.

Click OK and click on the commit button in the upper right to commit the changes.

Note: If you change the management IP address, and commit, you will never see the commit complete, as the IP address will take effect at 99% and you will be disconnected.

Type in the new IP address within the browser to connect back to the Web GUI.

You can verify that DNS is working by pinging a domain name, or by tracing a route to a site, both via the command-line interface (CLI).


ping host

traceroute hose

Use CTRL+C to break the cycle of continuous pings.


Thank you for visiting my tutorial page. For more tutorials, be sure to check IMCK Training for the latest updates.

1st & 2nd line IT training services.