PAN-OS Cheatsheet
#
PAN-OS is the operating system used by Palo Alto Networks’ next-generation firewalls. This cheatsheet provides common commands and configurations for PAN-OS.
Basic Commands
#
| Command/Option | Example | Description |
|---|
show system info | show system info | Display system information |
configure | configure | Enter configuration mode |
commit | commit | Commit changes to the configuration |
save | save | Save the current configuration |
exit | exit | Exit configuration mode |
restart device | restart device | Restart the device |
debug | debug log-receiver on | Enable debugging |
show log | show log system | Display system logs |
Interface Configuration
#
| Command/Option | Example | Description |
|---|
configure | configure | Enter configuration mode |
set interface ethernet1/1 | set interface ethernet1/1 | Configure interface ethernet1/1 |
set ip 192.168.1.1/24 | set ip 192.168.1.1/24 | Set IP address and subnet mask |
set name "Inside" | set name "Inside" | Set interface name |
commit | commit | Commit changes to the configuration |
exit | exit | Exit configuration mode |
show interface | show interface | Display interface status |
VLAN Configuration
#
| Command/Option | Example | Description |
|---|
configure | configure | Enter configuration mode |
set vlan 10 | set vlan 10 | Create or edit VLAN 10 |
set interface ethernet1/1 | set interface ethernet1/1 | Assign VLAN to interface ethernet1/1 |
set tag 10 | set tag 10 | Set VLAN tag |
commit | commit | Commit changes to the configuration |
exit | exit | Exit configuration mode |
show vlan | show vlan | Display VLAN configuration |
Security Policy Configuration
#
| Command/Option | Example | Description |
|---|
configure | configure | Enter configuration mode |
set rulebase security rules | set rulebase security rules | Enter security policy configuration mode |
edit Allow_HTTP | edit Allow_HTTP | Edit policy named Allow_HTTP |
set source 192.168.1.0/24 | set source 192.168.1.0/24 | Set source address |
set destination any | set destination any | Set destination address |
set application web-browsing | set application web-browsing | Set allowed application |
set action allow | set action allow | Set action to allow |
commit | commit | Commit changes to the configuration |
exit | exit | Exit security policy configuration mode |
show rulebase security | show rulebase security | Display security policy rules |
VPN Configuration
#
| Command/Option | Example | Description |
|---|
configure | configure | Enter configuration mode |
set network vpn ipsec | set network vpn ipsec | Enter VPN IPsec configuration mode |
edit vpn1 | edit vpn1 | Edit VPN configuration |
set interface ethernet1/2 | set interface ethernet1/2 | Set VPN interface |
set peer-address 203.0.113.1 | set peer-address 203.0.113.1 | Set peer IP address |
set pre-shared-key abc123 | set pre-shared-key abc123 | Set pre-shared key |
commit | commit | Commit changes to the configuration |
exit | exit | Exit VPN configuration mode |
show vpn ipsec | show vpn ipsec | Display VPN IPsec status |
Management
#
| Command/Option | Example | Description |
|---|
show system info | show system info | Display system information |
show config running | show config running | Display current configuration |
show log | show log | Display logs |
debug | debug log-receiver on | Enable debugging |
execute reboot | execute reboot | Reboot the device |
execute backup | execute backup | Backup the current configuration |
execute restore | execute restore | Restore configuration |
This cheatsheet covers essential PAN-OS commands for configuration, management, and troubleshooting of Palo Alto Networks devices. For detailed command syntax and additional options, consult the Palo Alto Networks documentation.