Palo blocks on login step

[PA-410]

my PA-410 remains stuck on the login. It refuses my password and prevents me from doing the configurations.

[Raido_Rattameister]

Is it new or existing setup?

If existing is traffic flowing as expected but management part has issues?

[PA-410]

Is this an existing configuration? In addition, existing traffic is not flowing as expected.

[Raido_Rattameister]

Are you connected over console cable?

Any errors on the console screen?

If traffic is not flowing anyway can you reboot firewall?

[PA-410]

PA-410 login: admin
Password:
Login incorrect

PA-410 login: admin
Password:
Last login: Fri May 26 14:43:24 on ttyS0
Enter old password :
Enter new password :
Confirm password :
Password changed

Number of failed attempts since last successful login: 1

There have been failed attempted logins from your username, which could mean someone is trying to brute-force your login. If t his is not expected, consider contacting your system administrator.

Avertissement : Votre appareil est toujours configuré avec les informations d’identification de compte administrateur par défaut. Veuillez changer votre mot de passe avant le départ.
admin@PA-410> ping hôte 192.168.1.1 PING 192.168.1.1 (192.168.1.1
) 56(84) octets de données.
64 octets à partir de 192.168.1.1 : icmp_seq=1 ttl=64 temps=0,080 ms 64 octets à partir de 192.168.1.1 : icmp_seq=2 ttl=64 temps=0,089 ms 64 octets à partir de 192.168.1.1 : icmp_seq=3 ttl=64 temps=0,086 ms 64 octets à partir de 192.168.1.1 : icmp_seq=4 ttl=64 temps=0,098 ms 64 octets à partir de 192.168.1.1 : icmp_seq=5 ttl=64 temps=0,267 ms




64 octets à partir de 192.168.1.1 : icmp_seq=6 ttl=64 temps=0.122 ms 64 octets à partir de 192.168.1.1: icmp_seq=7 ttl=64 temps=0.060 ms 64 octets à partir de 192.168.1.1: icmp_seq=8 ttl=64 temps=0.083 ms 64 octets à partir de 192.168.1.1: icmp_seq=9 ttl=64 temps=0.076 ms



64 octets à partir de 192.168.1.1: icmp_seq=10 ttl=64 temps=0.115 ms
^C
--- 192.168.1.1 statistiques ping ---
10 paquets transmis, 10 reçus, 0% de perte de paquets, temps 9194ms
rtt min/avg/max/mdev = 0,060/0,107/0,267/0,057 ms
admin@PA-410> ping hôte 172.16.100.2 PING 172.16.100.2 (172.16.100.2
) 56(84) octets de données.
À partir de 192.168.1.1 icmp_seq=1 hôte de destination inaccessible à partir de 192.168.1.1 icmp_seq=2 hôte de destination inaccessible à partir de 192.168.1.1 icmp_seq=3 hôte de destination inaccessible à partir de 192.168.1.1 icmp_seq=4 hôte de destination inaccessible à partir de 192.168.1.1 icmp_seq=5 hôte de destination inaccessible




à partir de 192.168.1.1 icmp_seq=6 hôte de destination inaccessible
^C
--- 172.16.100.2 statistiques ping ---
7 paquets transmis, 0 reçu, +6 erreurs, 100% de perte de paquets, temps 6157ms
pipe 4
admin@PA-410>

[Raido_Rattameister]

Seems issue is solved?

[BPry]

@PA-410,

It seems like you simply didn't wait for the device to finish booting. It's a bit deceptive since it'll give you a login prompt prior to the device actually being booted enough to login, but that's a normal thing whenever you restart a PAN firewall. It generally won't take that long to complete and become accessible again, especially on a newer 410, but there is a delay that's expected.