Focus

Next-Generation Firewall

Change CLI Modes

Table of Contents

Filter

Expand All | Collapse All

Next-Generation Firewall Docs

Getting Started
Administration
Networking
Quick Start
Reference
Incidents & Alerts
Release Notes
Select a Document
- PAN-OS 12.1
- PAN-OS 11.2
- PAN-OS 11.1
- PAN-OS 11.0 (EoL)
- PAN-OS 10.2
- PAN-OS 10.1
- PAN-OS 10.0 (EoL)
- PAN-OS 9.1 (EoL)
- PAN-OS 9.0 (EoL)
- PAN-OS 8.1 (EoL)
Help
Select a Document
- PAN-OS 12.1
- PAN-OS 11.2
- PAN-OS 11.1
- PAN-OS 10.2
- PAN-OS 10.1

Set Up an Administrative Account and Assign CLI Privileges

Find a Command

Change CLI Modes

Switch between operational and configuration modes in the PAN-OS CLI to perform different types of commands and configurations.

Where Can I Use This?	What Do I Need?
NGFW (Managed by PAN-OS or Panorama)	No prerequisites needed

The CLI provides two command modes:

Operational—Use operational mode to view information about the firewall and the traffic running through it or to view information about Panorama or a Log Collector. Additionally, use operational mode commands to perform operations such as restarting, loading a configuration, or shutting down. When you log in, the CLI opens in operational mode.
Configuration—Use configuration mode to view and modify the configuration, configuration commands will require committing the proposed configuration.

Both modes have different command sets and have different workflows and purposes associated with them, however both can be combined to perform complex operations to configure and view information about your systems remotely, other ways of interacting with the firewall such as using the XML API have a similar separation. To explore the different commands, you can Find a CLI Command. You can switch between operational and configuration modes at any time, as follows:

To switch from operational mode to configuration mode:
```
username@hostname> configure 
Entering configuration mode 
[edit] 
username@hostname# 
```
Notice that the command prompt changes from a > to a #, indicating that you successfully changed modes.
To switch from configuration mode to operational mode, use either the quit or exit command:
```
username@hostname# quit 
Exiting configuration mode 
username@hostname> 
```

To enter an operational mode command while in configuration mode, use the run command, for example:

username@hostname# run ping host 10.1.1.2 
PING 10.1.1.2 (10.1.1.2) 56(84) bytes of data 
... 
username@hostname#

Set Up an Administrative Account and Assign CLI Privileges

Find a Command

Next-Generation Firewall Docs

Change CLI Modes

Next-Generation Firewall Docs

Change CLI Modes

Activation and Onboarding

Next-Generation Firewalls

SASE

Cloud-Delivered Security Services

Network Security

Endpoints

Visibility & Monitoring

FedRAMP

Hardware Reference

Hardware Quick Start Guides

Virtual ION Deployment

3rd Party Integrations

Best Practices

Experts Corner