Export Management Permitted IP Access List

[NelsonE3]

I have been looking through posts but cannot seem to find what I am looking for.

There are some Management Interface Permitted IPs on our Firewalls that do not match the Template that we have for them in Panorama. Is there a CLI command where I can export the Permitted IP list for a firewalls' Management access? From the GUI there doesn't seem to be an export function either.

I just need to compare what is on the Firewalls vs. what is listed in Panorama as it would appear people have overwritten the template.

[TomYoung]

Hi @NelsonE3 ,

By default the Management Interface Settings DO override what is sent by Panorama.  You should see the orange gear on top of the green one to indicate override.  Mousing over the gear will also confirm.

You can run these commands from the CLI to see what is configured locally:

> set cli config-output-format set
> configure

# show deviceconfig system permitted-ip

The Panorama pushed config will NOT show there.  If you delete the local configuration, the Panorama configuration should then show up.

Thanks,

Tom