topic Re: How can I configure Palo Alto for static IP via MGT cable? No network access. in General Topics

How can I configure Palo Alto for static IP via MGT cable? No network access.

Schioppa — Mon, 17 Apr 2023 20:08:08 GMT

Re: How can I configure Palo Alto for static IP via MGT cable? No network access.

Schioppa — Mon, 17 Apr 2023 20:29:50 GMT

We had a lightning strike and our Palo Alto got fried. I have a replacement Palo Alto but the ISP is Spectrum Fiber and requires setting a static IP address within Palo Alto. Can I utilize the MGT port/cable to populate and configure the static IP info? Thanks for the help!

Re: How can I configure Palo Alto for static IP via MGT cable? No network access.

kiwi — Tue, 18 Apr 2023 09:55:15 GMT

Hi @Schioppa ,

Are you trying to configure a static IP address on your WAN interface using the CLI over the mgmt interface?

Ideally you'd want a backup config of your fried firewall to start from. Any chance you can import that config ?

Also wondering if you have GUI access via the mgmt port ? In the GUI you can navigate to the Network tab > Interfaces and configure a static IP there.

Using the CLI it's also possible (example shown for ethernet1/3) :

admin@pa-vm> configure Entering configuration mode [edit] admin@pa-vm# set network interface ethernet ethernet1/3 layer3 ip x.x.x.x/x

Note you'll also need to assign a security zone, a VR, likely also NAT and a security policy to be of any use though.

Kind regards,

-Kiwi.

Re: How can I configure Palo Alto for static IP via MGT cable? No network access.

delliott_6784 — Tue, 18 Apr 2023 11:00:44 GMT

I don't know the hardware you are working with but these instructions should help.

https://docs.paloaltonetworks.com/hardware/pa-400-hardware-reference/install-the-pa-400-firewall/set-up-a-connection-to-the-firewall