I have a HA firewall pair managed by Panorama. I would like to change all of the IP addresses of the interfaces. It's a lot to try to do through the GUI. My thinking is export the template as XML, make the necessary changes, and then import again.
The firewall HA pair is a test harness. The existing configuration is from my production firewalls. I need to change all of the IPs so I can connect it alongside my production firewalls without causing IP or routing conflicts.
I haven't figured out how to export the configuration. Most times I don't get any interface information. I was able to get an export from Panorama, but the IPv4 addresses are missing.
Hi @khsieh ,
My suggestion would be simpler:
- Prepare your configuration with text editor (ex. notepad++) in set format
- Login with SSH to your Panorama that is managing the targeted FW.
- Just copy/paste the set commands through the SSH session.
- Review your changes via the GUI, if everything looks ok, commit and push
Configuring network interface ip over CLI is pretty much exactly the same as if you do it directly on the FW. The only difference is that on Panorama the set command needs to refrence the template assigned to that FW.
Full command would be:
# set template <template-name> config network interface ethernet ethernet1/1 layer3 ip 184.108.40.206/29
Optional you can move
# edit template <template-name> config // this will place you in templace configuration so your every set command doesn't need to referecen it and you can simply
# set network interface ethernet ethernet1/1 layer3 ip 220.127.116.11/29 //repeat this for every interface you need to change
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!