topic Re: Configuring Interface Management Profile and Assign it to Agg Interface in General Topics

Configuring Interface Management Profile and Assign it to Agg Interface

VicAcebedo — Sat, 20 Jun 2020 13:05:30 GMT

Hi All,

I have a customer that looses it's access to the Web GUI of the PAN Firewall except console connection. Aggregate Interface is configured. Can I assign an interface management profile via CLI on the aggregate interfaces? E.g. ae1.100? When i type set network interface aggregate-ethernet and hit the "?" I can't see tha aggregate interfaces configured except ae1. I want to configured an interface management profile and assigned it to ae1.100 but on the cli it does not show except the ae1.

Re: Configuring Interface Management Profile and Assign it to Agg Interface

Vikram511 — Sat, 20 Jun 2020 16:16:07 GMT

Hi,

You are half-way to reach your sub-interface to configure in your syntax.

network interface aggregate-ethernet ae1 layer3 unit 100 ?

After this you can configure required settings on the sub-interface.

Re: Configuring Interface Management Profile and Assign it to Agg Interface

MP18 — Sat, 20 Jun 2020 16:30:35 GMT

Hi,

So you do not have dedicated management interface of the firewall?

Normally we access firewall via Management interface ip address.

If you want to use Agg Interface and apply Management profile you can do this via GUI also.

In our setup we have say aggregate interface ae1 and we have applied management profile to ae1.100

From CLI you can do this way

set network interface aggregate-ethernet ae3 layer3 units
ae3. ae3.
ae3.3849 ae3.3849
<value> name value

Re: Configuring Interface Management Profile and Assign it to Agg Interface

VicAcebedo — Sun, 21 Jun 2020 02:52:41 GMT

Will try your suggestion once we resume the support tomorrow. How about sub-interfaces? I also try on my virtual labs, I can't see on the CLI the sub-interfaces that I created.

Re: Configuring Interface Management Profile and Assign it to Agg Interface

VicAcebedo — Sun, 21 Jun 2020 02:56:36 GMT

They access the firewall via management interface but they only restrict it to one pc, unfortunately they forgot the password to that machine and can't login that's the only pc they use to access the firewall management interface.

I will try this tomorrow. I try to do a sub-interface on my virtual lab and it seems that I can't also see the sub-interfaces on the CLI when I try to apply an interface management profile

Re: Configuring Interface Management Profile and Assign it to Agg Interface

MP18 — Sun, 21 Jun 2020 03:06:03 GMT

We have below sub interfaces on the PA 5220

a3.3749

a3.3756

Where A3 is Aggregate Interface

IF you use the command which I mention earlier you should see sub interfaces as I see on my PA.

IF you have Virtual PA in lab then as per my knowledge the VM does not support sub interfaces

Re: Configuring Interface Management Profile and Assign it to Agg Interface

VicAcebedo — Sun, 21 Jun 2020 04:01:25 GMT

I try the units on my sub-interfaces instead of aggregate interface and it works. I change the sub-interface interface management profile. I hope this will work tomorrow on our clients production networks. Will update once it works

Re: Configuring Interface Management Profile and Assign it to Agg Interface

VicAcebedo — Mon, 22 Jun 2020 04:07:04 GMT

Hi,

This resolves the issue. thanks a lot.