©
Palo
Alto
Networks,
Inc.
Panorama
6.1
Administrator’s
Guide
•
49
Set
Up
Panorama
Set
Up
the
M
‐
100
Appliance
Step
11
(
Optional
)
Configure
the
Eth1
and/or
Eth2
interfaces
if
the
Panorama
management
server
and
Log
Collector
will
use
them
for
log
collection
and
Collector
Group
communication.
If
you
previously
deployed
the
Log
Collector
as
a
Panorama
management
server
and
configured
the
Eth1
and/or
Eth2
interfaces,
you
must
reconfigure
those
interfaces
because
switching
to
Log
Collector
mode
(
would
have
deleted
all
configurations
except
the
management
access
settings.
Palo
Alto
Networks
recommends
using
Eth1
and/or
Eth2
to
reduce
the
traffic
load
on
the
MGT
interface
and
to
improve
security
for
management
traffic.
1.
Configure
Eth1
and/or
Eth2
on
the
Panorama
management
server
if
you
haven’t
already:
a.
Select
Panorama > Setup > Management
.
b.
Edit
the
Eth1
Interface
Settings
and/or
Eth2
Interface
Settings.
For
each
interface,
complete
one
or
both
of
the
following
field
sets
based
on
the
IP
protocols
of
your
network:
–
IPv4—
IP Address
,
Netmask
,
and
Default Gateway
–
IPv6—
IPv6 Address/Prefix Length
and
Default IPv6
Gateway
c.
Click
OK
to
save
your
changes.
2.
Configure
Eth1
and/or
Eth2
on
the
Log
Collector:
a.
Select
Panorama > Managed Collectors
and
edit
the
Log
Collector.
b.
Configure
the
network
settings
of
the
Eth1
and/or
Eth2
interfaces.
For
each
interface,
select
the
corresponding
tab
and
configure
one
or
both
of
the
following
field
sets
based
on
the
IP
protocols
of
your
network.
–
IPv4—
IP Address
,
Netmask
,
and
Default Gateway
–
IPv6—
IPv6 Address/Prefix Length
and
Default IPv6
Gateway
c.
Click
OK
and
Commit
,
set
the
Commit Type
to
Panorama
,
and
click
OK
.
This
step
is
required
before
you
can
assign
the
Eth1
and
Eth2
interfaces
to
logging
functions.
d.
Edit
the
Log
Collector
again
and
select
the
interfaces
(MGT,
Eth1,
or
Eth2)
that
it
will
use
for
Device Log Collection
and
Collector Group Communication
(default
is
MGT).
e.
Click
OK
to
save
your
changes.
Step
12
Assign
the
Log
Collector
to
a
Collector
Group.
1.
.
You
must
perform
a
Panorama
commit
and
then
a
Collector
Group
commit
to
synchronize
the
Log
Collector
configuration
with
Panorama
and
to
put
the
Eth1
and
Eth2
interfaces
(if
you
configured
them)
in
an
operational
state
on
the
Log
Collector.
2.
Select
Panorama > Managed Collectors
to
verify
that
the
Log
Collector
configuration
is
synchronized
with
Panorama.
The
Configuration
Status
column
should
display
In
Sync
and
the
Run
Time
Status
column
should
display
connected.
3.
Access
the
Log
Collector
CLI
and
enter
the
following
command
to
verify
that
its
interfaces
are
operational:
>
show interface all
The
output
displays
the
state
as
up
for
each
interface
that
is
operational.
Step
13
Next
steps...
To
enable
the
Log
Collector
to
receive
firewall
logs:
1.
2.
.
Set
up
the
M
‐
100
Appliance
as
a
Log
Collector
(Continued)
