- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
06-08-2023 10:11 AM - edited 06-08-2023 10:16 AM
I want to change the hostnames of an HA pair that is being managed by Panorama. When I go to Panorama > Device I see the hostnames I want to change there. Are those being pulled from the hosts themselves? If so can I just change them on each FW and be done? Or do I need to do it from PANORAMA?
I don't use templates even though it seems there are templates for both HA FWs but I avoid them like the plague. If I go to Templates > Device and select either of those FW the Hostname field is blank (on PANORAMA). So its safe to assume it got those hostnames when I sucked the configs into PANORAMA? Or maybe someone pre-populated them?
Someone show me the way.
06-09-2023 03:00 AM
Hi @drewdown ,
Short answer: Yes, your assumption is correct. You have to change the hostname locally on the devices only (no changes on Panorama).
Detailed answer:
1. Panorama is using device serial number to identify managed devices. Hostname and mgmt IP in Panorama -> Managed Devices is populated from device telemetry pulled from the managed devices. You don't have to change any of those (hostname of IP) on Panorama to ensure it will continue to manage the firewalls
2. Templates and Template stacks are used to apply device configuration (in constrast of device-group which apply policies and objects). It is important to mention that any local device configuration (hostname, mgmt ip, network, routes, interfaces etc) will take precedent over Panorama pushed template. Which means that if you configure hostname locally on the firewalls and someone tries to push hostname defined in template, firewall will continue to use the local config - until it is explicitly instrcuted to replace the local config with pushed template.
3. The empty field in the template means such config is not defined in the template and therefor Panorama will not push anything for it
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!