Set Up an M-Series Appliance in Management Only Mode

How to set up an M-Series appliance in Management Only mode.
Set up the Panorama management server in Management Only mode to dedicate Panorama to managing firewalls and Dedicated Log Collectors. Panorama in Management Only mode have no log collection capabilities, except for config and system logs, and requires a Dedicated Log Collector to store logs.
If you configured a local Log Collector, the local Log Collector still exists on Panorama when you change to Management Only mode despite having no log collection capabilities. Deleting the local Log Collector (
Managed Collectors
) deletes the Eth1/1 interface configuration the local Log Collector uses by default. If you decide to delete the local Log Collector, you must reconfigure the Eth1/1 interface.
  1. Rack mount the M-Series appliance. Refer to the M-Series Appliance Hardware Reference Guide for instructions.
  2. Change to Management Only mode.
    1. Switch from Panorama mode to Management Only mode:
      request system system-mode management-only
    2. Enter
      to confirm the mode change. The Panorama management server reboots. If the reboot process terminates your terminal emulation software session, reconnect to the Panorama management server to see the Panorama login prompt.
      If you see a
      CMS Login
      prompt, this means the Panorama management server has not finished rebooting. Press Enter at the prompt without typing a username or password.
    3. Log back in to the CLI.
    4. Verify that the switch to Management Only mode succeeded:
      show system info | match system-mode
      If the mode change succeeded, the output displays:
      system mode:management-only

Recommended For You