Service route in panorama.

[Jafar_Hussain]

Dear Team,

I have two interfaces configured in my panorama:

1-management interface

2 -ethernet1/1.

for software and dynamic updates by default, my traffic is going via management interface. I want to change the service route through ethernet1/1 but I am not able to see any option to change the service route. below is the snapshot.

can anyone help with this where I can find this option?

[MP18]

You are in the right track.

You should see 

 

Pa has role based access control.

so you need to have rights to see all the info on gui

Can you log into this PA with admin username and then try?

[Jafar_Hussain]

@MP18Yes, i have the super admin rights.

Is there any way to change the service route through the CLI.

[MP18]

Yes you can change it via cli.

Please use below command from config mode

# set deviceconfig system route service ??

example

set deviceconfig system route service paloalto-networks-services source address   10.0.10.1/24

where source address can be of data plane interface

[Jafar_Hussain]

@MP18Thank you for your reply,

I have checked this command is only working in Palo alto. when I check the same command in panorama it is not working.

[MP18]

My bad.

Need morning coffee.

As Panorama is only for management and no data traffic goes via Panorama so that's the reason there is no service route config there

So this is by design you do not see service route config in GUI.

[Jafar_Hussain]

@MP18 

Thanks for the reply, it means we can not change the default behavior of the panorama to update the software or dynamic updates through the data plane interface(ethernet 1/1) interface.

[MP18]

Yes we can not change the default behavior.

[Jafar_Hussain]

@MP18thanks for the reply.

[Jafar_Hussain]

@MP18 

Hello , one last question have any documents for this, because i have searched everywhere but couldn't find anything.

[MP18]

@Jafar_Hussain 

I found below document that shows Panorama port usage

https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/troubleshooting/troubleshoot-log-stora...

This should clear the doubts.

Regard

[Jafar_Hussain]

@MP18 

thanks, appreciate your help.

[crodrigueze]

To change the service of the panorama deployment, push content and firmware and log collection its at Interfaces tab.

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/panorama-web-interface/panora...