topic Dumb question: Are there cases where a configuration change will take effect prior to committing? in General Topics

Dumb question: Are there cases where a configuration change will take effect prior to committing?

rpastor — Wed, 05 Jul 2023 15:57:52 GMT

I would like to reconfigure our PA-3260 FW to use its 40G interfaces instead of the 1G interfaces being used in production now. I plan to create one new aggregate ethernet interface made up of subinterfaces that correspond to each of the individual 1G AEs now in production. In the process, I will need to remove the IP addresses in each of those 1G AEs, to avoid having the same IP address on two interfaces. I plan to make the changes now and commit them during a maintenance window.

Out of extreme caution and due to a nagging memory I can't articulate, my question is whether network interface reconfigurations are any different than any other configurations. In other words, are they put into effect only upon committing, or immediately after entering?

Thank you

Re: Dumb question: Are there cases where a configuration change will take effect prior to committing?

seb_rupik — Wed, 05 Jul 2023 22:20:09 GMT

Hi there,

As soon as you start editing, these changes are stored in the candidate configuration. It isn't until you hit the commit button and the process completes successfully that it becomes the running configuration and comes into effect.

cheers,

Seb.

Re: Dumb question: Are there cases where a configuration change will take effect prior to committing?

PavelK — Wed, 05 Jul 2023 22:22:49 GMT

Hello @rpastor

the commit is required for changes to take an effect. If you make changes to the interface, nothing will happen until you commit it.

Only word of caution, if you have multiple Firewall admins who commit all changes (not only their own) they can accidently also commit the changes you staged for maintenance window. The same applies for Panorama managed Firewall. Each time the configuration is pushed by different admin, it will perform "commit all".

Kind Regards

Pavel

Re: Dumb question: Are there cases where a configuration change will take effect prior to committing?

rpastor — Thu, 06 Jul 2023 01:36:09 GMT

Thank you both.