topic create multiple address objects and then add to address group in Panorama Discussions

create multiple address objects and then add to address group

knorris-fnts — Tue, 01 Feb 2022 23:00:05 GMT

Hello,

Looking for a good way to create 122 address objects to add to an address group.

Would like to create an array of the 122 ips, then loop thru and create the objects, then add them to my group.

Thanks.

Re: create multiple address objects and then add to address group

RHuss1 — Fri, 18 Feb 2022 14:20:30 GMT

Anytime I have to add large numbers of addresses / groups I script it in the CLI.

Example:

set device-group DG_Name address ADDRESS_NAME ip-netmask 10.0.0.0/8

set device-group DG_NAME address-group GROUP_NAME static ADDRESS_NAME

Re: create multiple address objects and then add to address group

Plinio — Mon, 22 Aug 2022 16:24:53 GMT

Hi RHuss1,

I'm with a scenario where i need to create 500 host objects and add them to an already existing group, and i think i need some help understanding your examples, if you could.

Using this example:
"set device-group DG_Name address ADDRESS_NAME ip-netmask 10.0.0.0/8"

Are we creating a new object for the 10.0.0.0/8 network, called "ADDRESS_NAME", and adding it in a group named "DG_Name" that already exists?

The other one:

"set device-group DG_NAME address-group GROUP_NAME static ADDRESS_NAME"

I'm confused about this one, looks like "DG_NAME" and "GROUP_NAME" are 2 different groups and i'm adding the object "ADDRESS_NAME" to one of them, but i think i did't get it right.

I have a lot of experience with another vendors, but i'm new to panorama and i like to work with CLI for these cases, and i didn't find any detailed documentation about it.

I found these other ones and was planning to create a script using them, but i really don't know how they will work.

"set address host_XXX ip-netmask XXX/32
set address-group GROUP_NAME static host_XXX"

Line 1 - Create the new host object

Line 2 - Add the new objetc to the GROUP_NAME group.

Will the line 2 command ADD the host_XXX into the group without removing the other objects already there? Or this will make the host_XXX object the only one on that group? This is what i'm afraid...=]

Btw, this is a shared group used by multiple device groups.

Sorry about the long message and lots of questions, i'm just tryng to be clear (i'm not an english native speaker) =/

Thank you very much in advance.

Re: create multiple address objects and then add to address group

RHuss1 — Mon, 22 Aug 2022 18:32:33 GMT

Using this example:
"set device-group DG_Name address ADDRESS_NAME ip-netmask 10.0.0.0/8"

Are we creating a new object for the 10.0.0.0/8 network, called "ADDRESS_NAME", and adding it in a group named "DG_Name" that already exists? YES

In the 2nd example, You are adding the address object you created, to the address Group in the device group in Panorama.

Play around with it, you will get the hang of it.