topic Re: Looking for screenshots of a bare metal restore on a 2050 in General Topics

Looking for screenshots of a bare metal restore on a 2050

mstngsally — Thu, 18 May 2017 16:11:19 GMT

I'm developing an SOP and require screen shots for the following steps:

On the ‘Device’ tab, choose ‘Setup’ and configure the following:

On the ‘Management’ tab under ‘Management Interface Settings’, enter the firewall’s IP address, netmask, and default gateway.
On the ‘Services’ tab, enter the IP address of the DNS server.
Enter the IP address or host and domain name of the Network Time Protocol (NTP) server and select_r time zone.
Click ‘Support’ on the side menu.
Click the ‘Activate support using authorization codes’ link and enter the authorization codes received via email for any optional features. Use a space to separate multiple authorization codes.

Click ‘Administrators’ under the ‘Devices’ tab.
Click ‘admin’.
In the ‘New Password’ and ‘Confirm New Password’ fields, enter and confirm a case sensitive password (up to 15 characters).
Click ‘OK’ to submit the new password.
Commit the configuration to make these settings active. When the changes are committed, the firewall will be reachable through the IP address assigned in Step 5.

Re: Looking for screenshots of a bare metal restore on a 2050

TranceforLife — Thu, 18 May 2017 20:05:45 GMT

Can you install a VM a get what you need? It is free

Re: Looking for screenshots of a bare metal restore on a 2050

BPry — Thu, 18 May 2017 20:18:07 GMT

@mstngsally,

Outside of the live articles that cover this I don't think anybody is going to provide the screenshots for you just because it would take time to actually gather them.

One thing to note is that it might be better to make the procedure and document the CLI commands to actually configure it. Fewer screenshots and easier for someone that isn't as familiar with the platform to follow and do everything correctly. Just a thought.

Re: Looking for screenshots of a bare metal restore on a 2050

reaper — Thu, 18 May 2017 21:16:14 GMT

There's a lot of what you're asking for here: Getting Started: Setting Up Your Firewall

but i'd agree with @BPry : document the steps in CLI, they're easy to document, easy to manipulate, can be copypasted and take up only a little space

# set deviceconfig system ip-address 10.0.0.10 netmask 255.255.255.0 default-gateway 10.0.0.1 dns-setting servers primary 4.2.2.2

there's also a flaw in your steps regarding the license, you wont need to activate it, simply fetch it:

> request license fetch

changing the password is also as simple as

> set password s00p3r$3cr3T

then commit

# commit

feel free to look into the getting started series for more usful setup steps 🙂 Getting Started: The Series

Re: Looking for screenshots of a bare metal restore on a 2050

mstngsally — Fri, 19 May 2017 11:02:44 GMT

@BPry,

Totally agree... unfortunately my gov't client has "always done it this way" in their SOPs. My Network Engineer is supposed to provide. Question, though... when I ask him to provide the screenshots, he says that he cannot do them without resetting the device and rebooting it. From walking the dog through the steps, how is this an issue up to hitting the "OK" button at the end? Couldn't he go through and snip each step and not execute to get those for me?

Also, I was hoping someone else might have already done this for their own training. Palo has a guide with screenshots for initial set up but the right tabs are not displayed for this purpose.

Thank you though!

Sally

Re: Looking for screenshots of a bare metal restore on a 2050

TranceforLife — Fri, 19 May 2017 12:11:43 GMT

Yes he can do the screen shots without actually breaking things. You are correct, candidate configuration just a "candidate" unless you commit the change. Then candidate becomes an active (running configuration). So do not commit 😉

He then can zeroraze the candidate changes with the below option:

Re: Looking for screenshots of a bare metal restore on a 2050

mstngsally — Fri, 19 May 2017 12:09:51 GMT

YES! Thank you for the link! I probably irritated my NE by getting it myself but, whatever.