How can I configure Palo Alto for static IP via MGT cable? No network access.

[Schioppa]

We had a lightning strike and our Palo Alto got fried. I have a replacement Palo Alto but the ISP is Spectrum Fiber and requires setting a static IP address within Palo Alto. Can I utilize the MGT port/cable to populate and configure the static IP info? Thanks for the help! 

[kiwi]

Hi @Schioppa ,

Are you trying to configure a static IP address on your WAN interface using the CLI over the mgmt interface?

Ideally you'd want a backup config of your fried firewall to start from. Any chance you can import that config ?

Also wondering if you have GUI access via the mgmt port ? In the GUI you can navigate to the Network tab > Interfaces and configure a static IP there.

Using the CLI it's also possible (example shown for ethernet1/3) :

admin@pa-vm> configure
Entering configuration mode
[edit]
admin@pa-vm# set network interface ethernet ethernet1/3 layer3 ip x.x.x.x/x

Note you'll also need to assign a security zone, a VR, likely also NAT and a security policy to be of any use though.

Kind regards,

-Kiwi.

[delliott_6784]

I  don't know the hardware you are working with but these instructions should help.  

https://docs.paloaltonetworks.com/hardware/pa-400-hardware-reference/install-the-pa-400-firewall/set...