Today, one of the remote engineers (Jim) asked me to put an IP address
on a Palo Alto firewall so he could configure it remotely. He is a
couple of hours away from the box, so after the 13th time of him asking
me, I was happy to do so. So, I plugged a network cable into the
management port, put it in the right vlan on my core switch, and log
into the console port of the Palo Alto with the admin/admin
userID/password. You can use a Cisco console cable if you have one, as
that is what I had. Once you get to the prompt, here is what you do to
get an IP address onto the box:
configure
set deviceconfig system ip-address 192.168.1.6
set deviceconfig system default-gateway 192.168.1.1
commit
That should get Jim onto the box and work his magic remotely.
This is the retired Shane Killen personal blog, an IT technical blog about configs and topics related to the Network and Security Engineer working with Cisco, Brocade, Check Point, and Palo Alto and Sonicwall. I hope this blog serves you well. -- May The Lord bless you and keep you. May He shine His face upon you, and bring you peace.
Subscribe to:
Post Comments (Atom)
No net mask?
ReplyDeleteYou are right. I used the key word 'netmask' last night on an install while putting the IP address on. Good catch.
Deleteyou know, I probably should have, but I dont think I did that. Hmmm. Im sure you are right. Why wouldnt you put a subnet mask? Ill have to do that again and see. Ill update later on. Thanks for pointing that out.
ReplyDelete