Stuck out of management

L1 Bithead

Stuck out of management

Hello guys,


I have made a stupid mistake on a PA-820. I have changed the Permitted IP in the Interface Management Settings to a single IP (the Panorama server) and now I cannot access the device anymore.


Any ideas? I cannot access even in SSH. The Pan-OS versionis 8.0.3 and is peered with another device (that I can access).



L4 Transporter

Re: Stuck out of management

Hi @Shye80


You've got two options.


Connect to the device using a console cable and remove the permitted IP configuration on the CLI.


Connect up a client to the network and give it Panorama's IP address. Pretty risky this one though as you'd have to shut down Panorama or change it's IP which could impact your PAN deployment if you're logging and making changes etc on it.


hope this helps,


L1 Bithead

Re: Stuck out of management

Hello Ben,


many thanks for you reply. I simply fixed connecting from the Panorama CLI to the device via SSH and changed the permitted IP with the command "delete deviceconfig system permitted-ip" and "set deviceconfig system permitted-ip".


Thank you


Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!