Dumb question: Are there cases where a configuration change will take effect prior to committing?

[rpastor]

I would like to reconfigure our PA-3260 FW to use its 40G interfaces instead of the 1G interfaces being used in production now. I plan to create one new aggregate ethernet interface made up of subinterfaces that correspond to each of the individual 1G AEs now in production. In the process, I will need to remove the IP addresses in each of those 1G AEs, to avoid having the same IP address on two interfaces. I plan to make the changes now and commit them during a maintenance window.

Out of extreme caution and due to a nagging memory I can't articulate, my question is whether network interface reconfigurations are any different than any other configurations. In other words, are they put into effect only upon committing, or immediately after entering?

Thank you

[seb_rupik · Accepted solution]

Hi there,

As soon as you start editing, these changes are stored in the candidate configuration. It isn't until you hit the commit button and the process completes successfully that it becomes the running configuration and comes into effect.

cheers,

Seb.

[PavelK · Accepted solution]

Hello @rpastor

the commit is required for changes to take an effect. If you make changes to the interface, nothing will happen until you commit it.

Only word of caution, if you have multiple Firewall admins who commit all changes (not only their own) they can accidently also commit the changes you staged for maintenance window. The same applies for Panorama managed Firewall. Each time the configuration is pushed by different admin, it will perform "commit all".

Kind Regards

Pavel

[rpastor]

Thank you both.