©
Palo
Alto
Networks,
Inc.
Panorama
6.1
Administrator’s
Guide
•
37
Set
Up
Panorama
Set
Up
the
Panorama
Virtual
Appliance
.
Configure
the
Management
Interface
of
the
Panorama
Virtual
Appliance
Step
1
Gather
the
required
information
from
your
network
administrator.
•
IP
address
for
MGT
port
•
Netmask
•
Default
gateway
•
DNS
server
IP
address
Step
2
Access
the
console
of
the
Panorama
virtual
appliance.
1.
Select
the
Console
tab
on
the
ESX(i)
server
for
the
virtual
Panorama.
Press
enter
to
access
the
login
screen.
2.
Enter
the
default
username/password
(admin/admin)
to
log
in.
3.
Enter
configure
to
switch
to
configuration
mode.
Step
3
Configure
the
network
access
settings
for
the
management
interface.
The
management
interface
is
used
for
management
traffic,
HA
connectivity
synchronization,
log
collection,
and
communication
within
Collector
Groups.
Enter
the
following
command:
set deviceconfig system ip-address
<Panorama-IP> netmask <netmask>
default-gateway <gateway-IP> dns-setting
servers primary <DNS-IP>
where
<Panorama
‐
IP>
is
the
IP
address
you
want
to
assign
to
the
Panorama
management
interface,
<netmask>
is
the
subnet
mask,
<gateway
‐
IP>
is
the
IP
address
of
the
network
gateway,
and
<DNS
‐
IP>
is
the
IP
address
of
the
DNS
server.
Step
4
Commit
your
changes
and
exit
the
configuration
mode.
1.
Enter
commit
.
2.
Enter
exit
.
Step
5
Verify
network
access
to
external
services
required
for
firewall
management,
such
as
the
Palo
Alto
Networks
Update
Server.
To
verify
that
Panorama
has
external
network
access,
use
the
ping
utility.
Verify
connectivity
to
the
default
gateway,
DNS
server,
and
the
Palo
Alto
Networks
Update
Server
as
shown
in
the
following
example:
admin@Panorama-Corp>
ping host updates.paloaltonetworks.com
PING updates.paloaltonetworks.com (67.192.236.252) 56(84)
bytes of data.
64 bytes from 67.192.236.252: icmp_seq=1 ttl=243 time=40.5 ms
64 bytes from 67.192.236.252: icmp_seq=1 ttl=243 time=53.6 ms
64 bytes from 67.192.236.252: icmp_seq=1 ttl=243 time=79.5 ms
After
verifying
connectivity,
press
Ctrl+C
to
stop
the
pings.
Configure
the
Serial
Number
and
Time
Zone
of
the
Panorama
Virtual
Appliance
Step
1
Log
in
to
the
Panorama
web
interface.
Using
a
secure
connection
(https)
from
a
web
browser,
log
in
using
the
IP
address
and
password
you
assigned
to
the
management
interface
(https://<IP
address>).
Step
2
(Optional)
Modify
the
management
interface
settings.
1.
Select
Panorama > Setup > Management
and
edit
the
Management
Interface
Settings.
2.
Select
which
management
services
to
allow
on
the
interface.
For
example,
to
enable
SSH
access,
select
SSH
.
As
a
best
practice,
make
sure
Telnet
and
HTTP
are
not
selected
because
these
services
use
plaintext
and
are
not
as
secure
as
the
other
services.
3.
Click
OK
.
Click
Commit
and
select
Panorama
as
the
Type
and
click
OK
.
