topic Re: PA-850 Management port in Next-Generation Firewall Discussions

PA-850 Management port

Kevin407 — Tue, 24 Jan 2023 19:47:28 GMT

Hi.

I'd like to configure a PA-850's management port to use DHCP via the CLI using 10.2. All of the information I can find only shows how to set the standard interfaces to either an ip or dhcp, but not the management interface. Does anyone know if that is even possible? Even ChatGPT wasn't helpful 🙂

Re: PA-850 Management port

Raido_Rattameister — Tue, 24 Jan 2023 19:51:57 GMT

> configure

# set deviceconfig system type dhcp-client ...

With second command use questiomark to see all config options you need to set either yes or no

+ accept-dhcp-domain accept-dhcp-domain
+ accept-dhcp-hostname accept-dhcp-hostname
+ send-client-id send-client-id
+ send-hostname send-hostname

Re: PA-850 Management port

Kevin407 — Tue, 24 Jan 2023 21:06:31 GMT

Thanks for the help, this is certainly a little different than Cisco CLI...

So, when I make those changes and try to commit, I get a couple of errors, about virtual-wire interface1 ethernet1/1 is not a valid reference, then interface1 is invalid. The sys deviceconfig output still showing the default system ip and netmask (192.168.1.1/24).

Any ideas?

Re: PA-850 Management port

Raido_Rattameister — Tue, 24 Jan 2023 21:20:46 GMT

Do you have access to web interface?

It is easier there.

Out of the box ethernet1/1 and 1/2 are added to virtual wire as transparent firewall.
Did you change either of them to be Layer3?
If yes then delete virtual wire under "Network > Virtual Wires", delete default rule that permits traffic between virtual wires zones and then delete virtual wires zones.

Re: PA-850 Management port

Kevin407 — Tue, 24 Jan 2023 21:38:23 GMT

Hey Raido,

Yes, this is an out of the box 850, no other changes . Unfortunately, I don't currently have access to the web interface.

Re: PA-850 Management port

Raido_Rattameister — Tue, 24 Jan 2023 22:28:05 GMT

Check this topic

https://live.paloaltonetworks.com/t5/general-topics/pa-200-initial-configuration-from-console-only/td-p/41964

Re: PA-850 Management port

Kevin407 — Mon, 30 Jan 2023 11:50:17 GMT

Hi Raido,

Sorry for the delay getting back to you. Tried the information in the topic listed above, which caused another, different dhcpd error message (and two about DLP) with the commit failing. I have a visit to the site coming up, where I'll have access to the GUI, I'll post my result once that happens. Thanks again for the assistance.

Re: PA-850 Management port

Kevin407 — Mon, 20 Feb 2023 12:08:31 GMT

So - I never could make this change via the CLI, I got errors everytime. Once I was able to access the GUI locally at the site, it took about 3 minutes. Thanks for the assist!

Solution - use the GUI to change the management interface to use dhcp. 🙂