Palo Alto Mgmt Port Issue

[Lakshitha]

Dear Friends,

We are facing a issue that currently we are unable to console to firewall device. But traffic is passing through active firewall. Status is HA1 backup= Down

Please advice 

Thanks,

Lakshitha

[BPry]

@Lakshitha,

You'll have to provide a bit more info then that. Is the management interface your HA1 backup interface? Have you tried directly connecting to the Mgmt interface and verifying that the interface itself functions as it should? 

[Lakshitha]

Hi,

Yes you r correct. Tried but mgmt interface not loading even Console port also not connecting. If we reboot it it may works. But I need to know exact resion. Please advice

Thanks

Lakshitha

[BPry]

@Lakshitha,

At that point you really need to reload the box and see if you gain any sort of output from the firewall again. You can't troubleshoot this if you don't have any way to actually look at the box. 

[Raido_Rattameister]

@Lakshitha if neither console or mgmt interface works then check if you have configured interface management profile to any of network interfaces to allow fw management.

If yes then during offhours send active firewall to reboot and log into problematic firewall through dataplane interface.

If not then reboot problematic firewall and see if connectivity restores.

[Lakshitha]

Dear Friends,

Thnaks everyone. It was sort out. Problem was an ip address on Mgmt allowed ip list. I deleted it using 

Configure

delete deviceconfig system permitted-ip <subnet to be removed>

But my question is Why Console port also does not work ?

Thanks,

Lakshitha.

[BPry]

@Lakshitha,

You can actually turn off the MGMT port if you've enabled FIPS mode or CCEAL4. That's the only time I would expect the console port to be non-functional short of a malfunction of the port itself.