Palo Alto Networks Certified Network Security Administrator (PCNSA)Initial Configuration and ManagementEasy
A network administrator is performing the initial setup of a new Palo Alto Networks firewall. After connecting to the console, they need to manually configure the management interface with a static IP address, netmask, and default gateway to allow GUI access. Which command-line interface (CLI) command set is used for this purpose?
- Aset interface ethernet <id> ip <ip-address> mask <netmask>
- Bset management-interface ip <ip-address> netmask <netmask> gateway <gateway>
- Cset deviceconfig system ip-address <ip-address> netmask <netmask> default-gateway <gateway>
- Dconfigure network interface management ip <ip-address> netmask <netmask> gateway <gateway>
Show answer & explanationAnswer & explanation
Correct answer: C. set deviceconfig system ip-address <ip-address> netmask <netmask> default-gateway <gateway>
The command `set deviceconfig system` is used to configure system-wide parameters, including the management interface IP address, netmask, and default gateway, which is essential for initial GUI access.
Why the other options are wrong
- A. This command format is incorrect for configuring the management interface; it's more aligned with data plane interface configuration but still not the exact syntax.
- B. This command format is incorrect; the correct context for management interface settings is within `deviceconfig system`.
- D. This command format is not valid in PAN-OS CLI for configuring the management interface.
CLI Management IP Configuration
The `set deviceconfig system` command in the Palo Alto Networks CLI is used to configure the management interface's IP address, netmask, and default gateway for initial setup and access.
- Essential for initial out-of-band management access.
- Requires `commit` to save changes.
- Can also configure hostname, DNS, and NTP settings.
Memory trick: Device System settings are the first step to online.