Palo Alto Cli

find command keyword xxxx

 1. show system info

2. show routing route

3. show running nat-policy

4. test nat-policy-match 

5. ping host  !! From management interface

6. ping source xxxx host yyyy  !!ping from data plane interface

test routing fib-lookup virtual-router default ip x.x.x.x

show session

Run the following command to view the configuration:

• "set" format:    > set cli config-output-format set
• "xml" format:   > set cli config-output-format xml

enter configure, use show command

 admin@PA-VM# show shared server-profile
set shared server-profile ldap LDAP-Server-Profile server WinServer address 192.168.100.20
set shared server-profile ldap LDAP-Server-Profile server WinServer port 389
set shared server-profile ldap LDAP-Server-Profile ldap-type active-directory
set shared server-profile ldap LDAP-Server-Profile bind-dn ldap@jlab.local
set shared server-profile ldap LDAP-Server-Profile bind-password -AQ==Sleo8FQ+LyLesVDxY4PcwCsDiFM=MHhhgpwE2TwinRsSgIUkEw==
set shared server-profile ldap LDAP-Server-Profile ssl no
set shared server-profile ldap LDAP-Server-Profile base DC=jlab,DC=local
set shared server-profile kerberos Kerberos-Server-Profile server WinServer host 192.168.100.20
set shared server-profile kerberos Kerberos-Server-Profile server WinServer port 88
[edit]
admin@PA-VM#

https://www.shanekillen.com/2014/02/palo-alto-useful-cli-commands.html

https://indepthtechnology.org/2022/02/20/palo-alto-show-commands/

https://weberblog.net/cli-commands-for-troubleshooting-palo-alto-firewalls/