Not displaying palo alto login page

[Dilton111]

Hi all,

When i typed in my default gateway IP address it is displaying BT Smart Hub Manager page instead of Palo Alto login page.

I did all the configuration  connecting  VirtualBox and Palo alto.  Do I missing something why isn't displaying palo alto login page? It has been few days i am trying to find the solution. Help please. 

 

[W_Rafalski]

Hello, 

I guess you've deployed PA-VM on VirtualBox ? By default MGMT interface of VM gets IP address from DHCP. 192.168.1.1 is for hardware only. I would open console of VM through VirtualBox - in the end of booting process there is info about what IP VM got.

Did I understand your problem correctly ? 

[Dilton111]

Hi 

Yes I did deployed PA-VM on VirtualBox.  I did check my default gateway is 192.168.1.254. but when I entered the ip address is bringing me to my hub manager page and not to palo alto login page. Hub manager page(My ISP webpage) it is showing all devices that are connected to the hub include PA-VM. But I don't how to access palo alto login page.

[W_Rafalski]

Hello,
you shouldn't use defaut gateway address, but PA-VM address. It's not the same. On VirtualBox your PA is normal VM, like Windows Server or Centos. You don't go to the Internet through PA.

1) Just reboot your PA-VM, click twice on it in VirtualBox-> you will get console and after booting there will be info about leased IP address. IP address you should use in web browser (always with https://)

Second option:

2)  Click twice on you running PA-VM in VirtualBox, log in using admin/admin credentials and then use command "show system info". Here is example:

admin@anuragFW> show system info

hostname: anuragFW
ip-address: 10.21.56.125
netmask: 255.255.255.0
default-gateway: 10.21.56.1

[sthornton]

Try using the IP Address picked up by the VM, not the default gateway.

[Dilton111]

I did that. this is the IP address  192.168.1.78 But I am getting this message below:

This site can’t be reached

192.168.1.78 refused to connect.

Try:

• Checking the connection

ERR_CONNECTION_REFUSED

Reload

Hide details

[W_Rafalski]

So you need to do basic troubleshooting:

1. Be sure your PA-VM is running and finished booting process. 

2. Try to ping PA-VM from host.

3. Try to log into PA-VM, then ping your host from CLI:

> ping host <your host IP address>

4. Check if you don't block untrusted certificates ? New PA uses self-sign cert. By default you have to use https://

[Dilton111]

2- it is ok.  ping was successful

3. Trying to ping . I am getting this message "invalid syntax". 

[W_Rafalski]

"Invalid syntax" means you have a "typo", use "TAB" to complete command. 

Properly used command example:

> ping host 1.2.3.4

you will "ping" address 1.2.3.4 from your management interface. You can try as well:

> ping source <address of one of  PA-VM interfaces> host <your host IP address> 

Did you check you accept untrasted certs in your web browser ?

[Dilton111]

Yes. Ping successful to the host.

Untrusted certs. I deleted from mac "my certificates". But I still getting the same message from browser.

I am using google chrome. I went to settings and security and   added  https with ip address. but still isn't working.

[W_Rafalski]

1) Try to get into through http. First turn it on:

> configure

# set deviceconfig system service disable-http no

# commit

Then connect through web browser  http:// ....

2) What version of PAN-OS do you use ?

[Dilton111]

2) 9.0.4

[Dilton111]

still getting the same message:

This site can’t be reached

192.168.1.78 refused to connect.

Try:

• Checking the connection

ERR_CONNECTION_REFUSED

[W_Rafalski]

So, if you say there is a network connection from both sides (ping) and you enabled http, try:

1) Open Web Gui using incognito mode (cache issues)

2) Open Web Gui using other web browser

3) Try to disable any browser extensions

4) Try to temporary disable local antivirus or firewall

Check server-side:

5) https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000POIHCA4

By the way, 9.0.x is out-of-date, do you really need to use this version ?

[Dilton111]

I can't understand if I did all these configurations. and I can ping both sides. But it still not opening palo alto login page. 

I am using mac but I saw some video on online people managed to display the PA login page.  I have been fighting for weeks without any solution.