https://live.paloaltonetworks.com/t5/general-topics/management-down/m-p/78360#M42916 <P>you can add a 'permitted IP addresses' access list to the management interface if it needs to be in a routed network containing untrusted clients:</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2016-05-19_11-49-17.jpg"><img src="https://live.paloaltonetworks.com/skins/images/5DE745A4213343D2E26844B0146B285E/responsive_peak/images/image_not_found.png" alt="2016-05-19_11-49-17.jpg" /></span></P> Thu, 19 May 2016 09:53:45 GMT reaper 2016-05-19T09:53:45Z https://live.paloaltonetworks.com/t5/general-topics/management-down/m-p/78317#M42904 <DIV style="width: 100%;"><TEXTAREA id="source-is" class="goog-textarea short_text" dir="ltr" style="overflow-y: hidden; overflow-x: auto; box-sizing: border-box; padding-bottom: 32px; height: 69px; padding-right: 20px;" spellcheck="false" disabled="disabled" name="text-is" wrap="SOFT"></TEXTAREA></DIV> <DIV id="gt-src-c" class="g-unit">&nbsp;</DIV> <DIV id="gt-res-c" class="g-unit"> <DIV id="gt-res-p"> <DIV id="gt-res-data"> <DIV id="gt-res-wrap"> <DIV id="gt-res-content" class="almost_half_cell"> <DIV dir="ltr" style="zoom: 1;"> <DIV id="tts_button"><OBJECT type="application/x-shockwave-flash" data="https://ssl.gstatic.com/translate/sound_player2.swf" id="tts" height="18" width="18"></OBJECT></DIV> <SPAN class=""><SPAN class="">Dear</SPAN> <SPAN class="">engineers</SPAN><SPAN>.</SPAN><BR /><BR /><SPAN>Here</SPAN> <SPAN>again</SPAN> <SPAN>asking</SPAN> <SPAN class="">for</SPAN> <SPAN class="">help and advice.</SPAN><BR /><BR /><SPAN>Implement a</SPAN> <SPAN>PA500</SPAN> <SPAN>in</SPAN> <SPAN class="">L3</SPAN> <SPAN class="">mode</SPAN><SPAN>,</SPAN> <SPAN class="">in which</SPAN> <SPAN>trust</SPAN> <SPAN>in part</SPAN> <SPAN>through</SPAN> <SPAN>mpls</SPAN> <SPAN>192.168.1.10</SPAN> <SPAN>and</SPAN> <SPAN class="">have to get to</SPAN> <SPAN>the</SPAN> <SPAN class="">adminstracion</SPAN> <SPAN class="">that has the</SPAN> <SPAN>IP</SPAN> <SPAN>192.168.1.20</SPAN><SPAN>,</SPAN> <SPAN>but</SPAN> <SPAN>from another network</SPAN> <SPAN>that is in the</SPAN> <SPAN>MPLS</SPAN> <SPAN class="">not get to</SPAN> <SPAN class="">the administration of</SPAN> <SPAN>equipment</SPAN> <SPAN>such as:</SPAN><BR /><BR /><SPAN>172.16.0.12</SPAN> <SPAN>can not reach</SPAN> <SPAN>the administration of</SPAN> <SPAN>PA,</SPAN> <SPAN class="">but if</SPAN> <SPAN class="">I can</SPAN> <SPAN>reach</SPAN> <SPAN>any other</SPAN> <SPAN>host</SPAN> <SPAN>on that network</SPAN> <SPAN>192.168.1.0</SPAN> <SPAN>/ 24.</SPAN><BR /><SPAN>I can help</SPAN> <SPAN>you</SPAN> <SPAN>rule</SPAN> <SPAN>I can</SPAN> <SPAN>do to</SPAN> <SPAN>help achieve</SPAN> <SPAN class="">the administration</SPAN><SPAN class="">.</SPAN></SPAN></DIV> <DIV dir="ltr" style="zoom: 1;">&nbsp;</DIV> <DIV dir="ltr" style="zoom: 1;"><SPAN class=""><SPAN class="">thanks </SPAN></SPAN></DIV> </DIV> </DIV> </DIV> </DIV> </DIV> Wed, 18 May 2016 15:57:05 GMT https://live.paloaltonetworks.com/t5/general-topics/management-down/m-p/78317#M42904 Edluna 2016-05-18T15:57:05Z https://live.paloaltonetworks.com/t5/general-topics/management-down/m-p/78360#M42916 <P>you can add a 'permitted IP addresses' access list to the management interface if it needs to be in a routed network containing untrusted clients:</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2016-05-19_11-49-17.jpg"><img src="https://live.paloaltonetworks.com/skins/images/5DE745A4213343D2E26844B0146B285E/responsive_peak/images/image_not_found.png" alt="2016-05-19_11-49-17.jpg" /></span></P> Thu, 19 May 2016 09:53:45 GMT https://live.paloaltonetworks.com/t5/general-topics/management-down/m-p/78360#M42916 reaper 2016-05-19T09:53:45Z