Locked out after adding Allowed IP Addresses to Management interface

yllib1213 — Thu, 21 Jan 2021 20:01:35 GMT

I did not see any good information on how to fix this issue. I accidently entered the wrong subnet under Device > Interfaces > Interface > Allowed IP Addresses and was locked out of my primary firewall. I could still login to the backup as this was not a shared setting. I opened a support case and they did not offer a good solution to fix this so here's what I did. I have physical access to the device so I used my Cisco blue serial cable (familiar to many) to plug into the Palo Alto's console port and was able to login with my credentials. I issued the configure command to enter configuration mode and then entered load config version and then picked the config version before the latest one and then I was able to get back into the primary firewall.

Re: Locked out after adding Allowed IP Addresses to Management interface

kiwi — Fri, 22 Jan 2021 10:55:25 GMT

Hi @yllib1213 ,

Thanks for sharing !

That's pretty much how I would do it as well. Serial cable FTW !

Cheers !

-Kiwi.

topic Re: Locked out after adding Allowed IP Addresses to Management interface in General Topics

Locked out after adding Allowed IP Addresses to Management interface

Re: Locked out after adding Allowed IP Addresses to Management interface