Focus

PAN-OS CLI Quick Start

Set Commands Introduced in PAN-OS 9.1

Table of Contents

Set Commands Introduced in PAN-OS 9.1

Command line interface 'set' commands that are new in PAN-OS 9.1.

The following commands are new in PAN-OS 9.1:

set deviceconfig system panorama
set deviceconfig system panorama local-panorama
set deviceconfig system panorama local-panorama panorama-server <value>
set deviceconfig system panorama local-panorama panorama-server-2 <value>

set deviceconfig setting management disable-commit-recovery <yes|no>
set deviceconfig setting management commit-recovery-retry <1-5>
set deviceconfig setting management commit-recovery-timeout <3-30>

set network interface ethernet <name> layer3 ip <name> sdwan-gateway <ip/netmask>

set network interface ethernet <name> layer3 sdwan-link-settings
set network interface ethernet <name> layer3 sdwan-link-settings enable <yes|no>

set network interface ethernet <name> layer3 sdwan-link-settings sdwan-interface-profile <value>

set network interface sdwan
set network interface sdwan units
set network interface sdwan units <name>
set network interface sdwan units <name> comment <value>
set network interface sdwan units <name> cluster-name <value>
set network interface sdwan units <name> interface  [ <interface1> <interface2>... ]

set network ike gateway <name> comment <value>
set network tunnel ipsec <name> comment <value>

set network qos profile <name> class-bandwidth-type
set network qos profile <name> class-bandwidth-type mbps
set network qos profile <name> class-bandwidth-type mbps class
set network qos profile <name> class-bandwidth-type mbps class <name>
set network qos profile <name> class-bandwidth-type mbps class <name> priority <real-time|high|medium|low>

set network qos profile <name> class-bandwidth-type mbps class <name> class-bandwidth

set network qos profile <name> class-bandwidth-type mbps class <name> class-bandwidth egress-max <float>

set network qos profile <name> class-bandwidth-type mbps class <name> class-bandwidth egress-guaranteed <float>

set network qos profile <name> class-bandwidth-type percentage
set network qos profile <name> class-bandwidth-type percentage class
set network qos profile <name> class-bandwidth-type percentage class <name>
set network qos profile <name> class-bandwidth-type percentage class <name> priority <real-time|high|medium|low>

set network qos profile <name> class-bandwidth-type percentage class <name> class-bandwidth

set network qos profile <name> class-bandwidth-type percentage class <name> class-bandwidth egress-max <float>

set network qos profile <name> class-bandwidth-type percentage class <name> class-bandwidth egress-guaranteed <float>

set network qos interface <name> regular-traffic groups <name> members <name> match local-address destination_interface <value>

set network shared-gateway <name> rulebase sdwan
set network shared-gateway <name> rulebase sdwan rules
set network shared-gateway <name> rulebase sdwan rules <name>
set network shared-gateway <name> rulebase sdwan rules <name> from  [ <from1> <from2>... ]

set network shared-gateway <name> rulebase sdwan rules <name> to  [ <to1> <to2>... ]

set network shared-gateway <name> rulebase sdwan rules <name> source  [ <source1> <source2>... ]

set network shared-gateway <name> rulebase sdwan rules <name> source-user  [ <source-user1> <source-user2>... ]

set network shared-gateway <name> rulebase sdwan rules <name> destination  [ <destination1> <destination2>... ]

set network shared-gateway <name> rulebase sdwan rules <name> application  [ <application1> <application2>... ]

set network shared-gateway <name> rulebase sdwan rules <name> service  [ <service1> <service2>... ]

set network shared-gateway <name> rulebase sdwan rules <name> tag  [ <tag1> <tag2>... ]

set network shared-gateway <name> rulebase sdwan rules <name> negate-source <yes|no>

set network shared-gateway <name> rulebase sdwan rules <name> negate-destination <yes|no>

set network shared-gateway <name> rulebase sdwan rules <name> disabled <yes|no>

set network shared-gateway <name> rulebase sdwan rules <name> description <value>

set network shared-gateway <name> rulebase sdwan rules <name> group-tag <value>

set network shared-gateway <name> rulebase sdwan rules <name> path-quality-profile <value>

set network shared-gateway <name> rulebase sdwan rules <name> action
set network shared-gateway <name> rulebase sdwan rules <name> action traffic-distribution-profile <value>

set network shared-gateway <name> rulebase sdwan rules <name> action app-failover-for-nat-sessions <keep-existing-link|failover-to-better-path>

set shared application-filter <name> tagging
set shared application-filter <name> tagging no-tag <yes>
set shared application-filter <name> tagging tag  [ <tag1> <tag2>... ]
set shared application-filter <name> exclude  [ <exclude1> <exclude2>... ]

set shared profiles hip-objects <name> host-info criteria os contains IoT <value>

set shared profiles sdwan-path-quality
set shared profiles sdwan-path-quality <name>
set shared profiles sdwan-path-quality <name> metric
set shared profiles sdwan-path-quality <name> metric latency
set shared profiles sdwan-path-quality <name> metric latency threshold <10-3000>

set shared profiles sdwan-path-quality <name> metric latency sensitivity <low|medium|high>

set shared profiles sdwan-path-quality <name> metric pkt-loss
set shared profiles sdwan-path-quality <name> metric pkt-loss threshold <1-100>

set shared profiles sdwan-path-quality <name> metric pkt-loss sensitivity <low|medium|high>

set shared profiles sdwan-path-quality <name> metric jitter
set shared profiles sdwan-path-quality <name> metric jitter threshold <10-2000>

set shared profiles sdwan-path-quality <name> metric jitter sensitivity <low|medium|high>

set shared profiles sdwan-traffic-distribution
set shared profiles sdwan-traffic-distribution <name>
set shared profiles sdwan-traffic-distribution <name> traffic-distribution <Best Available Path|Top Down Priority|Weighted Session Distribution>

set shared profiles sdwan-traffic-distribution <name> link-tags
set shared profiles sdwan-traffic-distribution <name> link-tags <name>
set shared profiles sdwan-traffic-distribution <name> link-tags <name> weight <0-100>

set shared admin-role <name> role device webui policies sdwan-rulebase <enable|read-only|disable>

set shared admin-role <name> role device webui objects dynamic-user-groups <enable|read-only|disable>

set shared admin-role <name> role device webui objects sdwan
set shared admin-role <name> role device webui objects sdwan sdwan-profile <enable|read-only|disable>

set shared admin-role <name> role device webui objects sdwan sdwan-dist-profile <enable|read-only|disable>

set shared admin-role <name> role device webui network sdwan-interface-profile <enable|read-only|disable>

set shared admin-role <name> role vsys webui policies sdwan-rulebase <enable|read-only|disable>

set shared admin-role <name> role vsys webui objects dynamic-user-groups <enable|read-only|disable>

set shared admin-role <name> role vsys webui objects sdwan
set shared admin-role <name> role vsys webui objects sdwan sdwan-profile <enable|read-only|disable>

set shared admin-role <name> role vsys webui objects sdwan sdwan-dist-profile <enable|read-only|disable>

set shared admin-role <name> role vsys webui network sdwan-interface-profile <enable|read-only|disable>

set vsys <name> import resource max-sdwan-rules <0-2000>
set vsys <name> log-settings profiles <name> match-list <name> actions <name> type tagging target <source-address|destination-address|user>

set vsys <name> sdwan-interface-profile
set vsys <name> sdwan-interface-profile <name>
set vsys <name> sdwan-interface-profile <name> link-tag <value>
set vsys <name> sdwan-interface-profile <name> link-type <ADSL/DSL|Cablemodem|Ethernet|Fiber|LTE/3G/4G/5G|MPLS|Microwave/Radio|Satellite|WiFi|Other>

set vsys <name> sdwan-interface-profile <name> maximum-download <1-100000>

set vsys <name> sdwan-interface-profile <name> maximum-upload <1-100000>

set vsys <name> sdwan-interface-profile <name> path-monitoring <Aggressive|Relaxed>

set vsys <name> sdwan-interface-profile <name> probe-frequency <1-5>
set vsys <name> sdwan-interface-profile <name> probe-idle-time <1-86400>

set vsys <name> sdwan-interface-profile <name> failback-hold-time <20-120>

set vsys <name> sdwan-interface-profile <name> comment <value>

set vsys <name> profiles hip-objects <name> host-info criteria os contains IoT <value>

set vsys <name> profiles sdwan-path-quality
set vsys <name> profiles sdwan-path-quality <name>
set vsys <name> profiles sdwan-path-quality <name> metric latency
set vsys <name> profiles sdwan-path-quality <name> metric latency sensitivity <low|medium|high>

set vsys <name> profiles sdwan-path-quality <name> metric pkt-loss
set vsys <name> profiles sdwan-path-quality <name> metric pkt-loss threshold <1-100>
set vsys <name> profiles sdwan-path-quality <name> metric pkt-loss sensitivity <low|medium|high>

set vsys <name> profiles sdwan-path-quality <name> metric jitter
set vsys <name> profiles sdwan-path-quality <name> metric jitter threshold <10-2000>

set vsys <name> profiles sdwan-path-quality <name> metric jitter sensitivity <low|medium|high>

set vsys <name> profiles sdwan-traffic-distribution
set vsys <name> profiles sdwan-traffic-distribution <name>
set vsys <name> profiles sdwan-traffic-distribution <name> traffic-distribution <Best Available Path|Top Down Priority|Weighted Session Distribution>

set vsys <name> profiles sdwan-traffic-distribution <name> link-tags
set vsys <name> profiles sdwan-traffic-distribution <name> link-tags <name>
set vsys <name> profiles sdwan-traffic-distribution <name> link-tags <name> weight <0-100>

set vsys <name> dynamic-user-group
set vsys <name> dynamic-user-group <name>
set vsys <name> dynamic-user-group <name> description <value>
set vsys <name> dynamic-user-group <name> filter <value>
set vsys <name> dynamic-user-group <name> tag  [ <tag1> <tag2>... ]

set vsys <name> application-filter <name> tagging
set vsys <name> application-filter <name> tagging no-tag <yes>
set vsys <name> application-filter <name> tagging tag  [ <tag1> <tag2>... ]

set vsys <name> application-filter <name> exclude  [ <exclude1> <exclude2>... ]

set vsys <name> rulebase sdwan
set vsys <name> rulebase sdwan rules
set vsys <name> rulebase sdwan rules <name>
set vsys <name> rulebase sdwan rules <name> from  [ <from1> <from2>... ]

set vsys <name> rulebase sdwan rules <name> to  [ <to1> <to2>... ]

set vsys <name> rulebase sdwan rules <name> source  [ <source1> <source2>... ]

set vsys <name> rulebase sdwan rules <name> source-user  [ <source-user1> <source-user2>... ]

set vsys <name> rulebase sdwan rules <name> destination  [ <destination1> <destination2>... ]

set vsys <name> rulebase sdwan rules <name> application  [ <application1> <application2>... ]

set vsys <name> rulebase sdwan rules <name> service  [ <service1> <service2>... ]

set vsys <name> rulebase sdwan rules <name> tag  [ <tag1> <tag2>... ]

set vsys <name> rulebase sdwan rules <name> negate-source <yes|no>
set vsys <name> rulebase sdwan rules <name> negate-destination <yes|no>

set vsys <name> rulebase sdwan rules <name> disabled <yes|no>
set vsys <name> rulebase sdwan rules <name> description <value>
set vsys <name> rulebase sdwan rules <name> group-tag <value>
set vsys <name> rulebase sdwan rules <name> path-quality-profile <value>

set vsys <name> rulebase sdwan rules <name> action
set vsys <name> rulebase sdwan rules <name> action traffic-distribution-profile <value>

set vsys <name> rulebase sdwan rules <name> action app-failover-for-nat-sessions <keep-existing-link|failover-to-better-path>

CLI Changes in PAN-OS 9.1

Set Commands Changed in PAN-OS 9.1