How to check media sfp interfaces
(F5) tmsh list net interface media-active vendor serial ( Palo Alto ) show system state filter sys.s1.p*.phy
Posts
Export Security Policy Rule
## From CLI : > set cli config-output-format set ## From the configure mode: # show rulebase security rules # show rulebase (to view other policies).
L2 Routing
## Topology ## Zones ## Interface Management ( MGMT ) ## VLANs ## VLAN Interface vlan.10 ( Internet Zones ) Config IPv4 Advanced > Management Profile vlan.797 ( Internal/LAN Zones ) Config IPv4 Advanced > Management Profile ### Ethernet Interface ### Virtual Router ( VR ) ## Security Policy ## NAT NAT Policy Rule ...
Interface Flapping
## Check CLI mode show arp all ( eventid eq link-change ) and ( object eq 'ethernet1/11' ) show interface ethernet1/11 | match link show log system query equal "( eventid eq link-change ) and ( object eq 'ethernet1/11' )" direction equal backward show log system direction equal backward show interface ethernet 1/11 state filter sys.s1.* | match crc ## Check media Interfaces show system state filter sys.s1.p*.phy
How restart management services on Palo Alto
### PAN-OS 6 debug software restart management-server ### PAN-OS 7 / 8 debug software restart process management-server show system resources | match mgmt
Clear Disk-Space - Palo Alto
## CLI mode show system disk-space delete core management-plane file sslvpn_7.1.10_0.tar.gz > delete debug-log ? > delete debug-log mp-log file *.1 > delete debug-log mp-log file *.2 > delete debug-log mp-log file *.3 > delete debug-log mp-log file *.4 > delete debug-log mp-log file *.old > delete content cache old-content > delete anti-virus update ## Others > delete debug-log mp-log file *.old > delete debug-log mp-log file *.log.1 > delete debug-log mp-log file *.log.2 > delete debug-log mp-log file *.log.3 > delete debug-log mp-log file *.log.4 > delete debug-log dp0-log file *.old > delete debug-log dp0-log file *.log.1 > delete debug-log dp0-log file *.log.2 > delete debug-log dp0-log file *.log.3 > delete debug-log dp0-log file *.log.4 > delete debug-log dp1-log file *.old > delete debug-log dp1-log file *.log.1 > delete debug-log dp1-log file *.log.2 > delete debug-log dp1-log file *.log.3 > delete debug-...
Export SCP
## CLI mode scp export logdb to root@x.x.x.x:/logdbPA-Swan scp export logdb to maintence@x.x.x.x:/home/maintenance/logdbPA-Swan scp export logdb to maintence@x.x.x.x.x:/home/maintenance/logdbPA-Swan > set cli config-output-format set > configure # show > set cli config-output-format xml > configure # show scp export log traffic start-time equal 2019/01/01@00:00:00 end-time equal 2020/06/26@00:00:00 to maintenance@x.x.x.x:/logs-traffic-pa-swan scp export log system start-time equal 2019/01/01@00:00:00 end-time equal 2020/06/26@00:00:00 to maintenance@x.x.x.x:/logs-system-pa-swan scp export log alarm start-time equal 2019/01/01@00:00:00 end-time equal 2020/06/26@00:00:00 to maintenance@x.x.x.x:/logs-alarm-pa-swan scp export log config start-time equal 2019/01/01@00:00:00 end-time equal 2020/06/26@00:00:00 to maintenance@x.x.x.x:/logs-config-pa-swan scp export log data start-time equal 2019/01/01@00:00:00 end-time equal 2020/06/26@00:00:00 to maintenance@172.18.65.18...