paloalto:paloalto
This is an old revision of the document!
PaloAlto
Disable ZTP:
set system ztp disable
MANAGEMENT
It's possible to use data ports for management. It's done via Interface Management Profile:
- Create in Network | Network Profiles | Interface Management Profile
- Then attach to Network | Interfaces on the Advanced
CLI verison:
set network profiles interface-management-profile mgmt https yes ssh yes permitted-ip 10.15.15.37 set network profiles interface-management-profile mgmt permitted-ip 192.168.0.5
Service Route Configuration
If the management interface does not have access to the internet, this can create interesting challenges as it will not be able to retrieve updates or perform cloud lookups. A workaround is to enable service routes that route specific applications, services, or protocols via the backplane onto a designated data plane interface
- Device | Setup | Services
- Service Route Configuration
paloalto/paloalto.1770282673.txt.gz · Last modified: by v1ctor
