topic How to Configure the Management Interface IP via API in Automation/API Discussions

How to Configure the Management Interface IP via API

SA129 — Thu, 14 Jul 2016 21:03:46 GMT

Trying to automate a task of configuring the management interface of a firewall device through the API. I see where the API's leading for the configuration, but I'm stumped as to how to edit/set the IP.

Example. using Powershell:

$Firewall = https://firewall

$apiKey = apikey

$ipaddress = x.x.x.x

$content1 = Invoke-RestMethod "$Firewall/api/?type=config&key=$apiKey&action=set&xpath=/config/devices/entry[@name='localhost.localdomain']/deviceconfig/system/ip-address/member[@name='$ipaddress']"

How would I proceed with setting the $ipaddress I need to the location?

Re: How to Configure the Management Interface IP via API

torm — Fri, 15 Jul 2016 06:32:01 GMT

I think you need to include the "element=" for the value you want to set:

For example somehting like this:

$content1 = Invoke-RestMethod "$Firewall/api/?type=config&key=$apiKey&action=set&xpath=/config/devices/entry[@name='localhost.localdomain']/deviceconfig/system/&element=<ip-address>$ipaddress</ip-address>"

Re: How to Configure the Management Interface IP via API

SA129 — Fri, 15 Jul 2016 13:15:54 GMT

I've played around with the element approach from both /deviceconfig/system and /deviceconfig/system/ipaddress.

Unfortunately, I'm not having any luck on it.

Re: How to Configure the Management Interface IP via API

ksteves1 — Mon, 18 Jul 2016 00:16:14 GMT

The XPath cannot end in slash. For example:

$ ./panxapi.py -t p30443 -xS '<ip-address>192.168.1.102</ip-address>' "/config/devices/entry[@name='localhost.localdomain']/deviceconfig/system/"
set: error [code="13"]: "set failed, may need to override template object first"
<response code="13" status="error"><msg><line>set failed, may need to override template object first</line></msg></response>

$ ./panxapi.py -t p30443 -xS '<ip-address>192.168.1.102</ip-address>' "/config/devices/entry[@name='localhost.localdomain']/deviceconfig/system"
set: success [code="20"]: "command succeeded"
<response code="20" status="success"><msg>command succeeded</msg></response>

Re: How to Configure the Management Interface IP via API

SA129 — Wed, 20 Jul 2016 20:14:04 GMT

That was it. Thanks ksteves1