Use a terminal emulator, such as PuTTY, to connect to the CLI of a Palo Alto Networks device in one of the following ways:
—If you have completed initial configuration, you can establish a CLI connection over the network using a secure shell (SSH) connection.
—If you have not yet completed initial configuration or if you chose not to enable SSH on the Palo Alto Networks device, you can establish a direct serial connection from a serial interface on your management computer to the Console port on the device.
Access the PAN-OS CLI
Launch the terminal emulation software and select the type of connection (Serial or SSH).
To establish an SSH connection, enter the hostname or IP address of the device you want to connect to and set the port to
To establish a Serial connection, connect a serial interface on management computer to the Console port on the device. Configure the Serial connection settings in the terminal emulation software as follows:
When prompted to log in, enter your administrative username.
The default superuser username is
. To set up CLI access for other administrative users, see
Give Administrators Access to the CLI.
If prompted to acknowledge the login banner, enter
Enter the administrative password.
The default superuser password is admin. However, for security reasons you should immediately change the
After you log in, the message of the day
displays, followed by the CLI prompt in Operational mode:
You can tell you are in operational mode because the command prompt ends with a