topic Re: Ansible for interfaces on PA in Automation/API Discussions

Ansible for interfaces on PA

jacksonp — Sun, 11 Jun 2017 18:22:18 GMT

The ansible module "panos_interface" doesn't seem to have all the parameters that shoud should be availble for an interface.

I need to create *many* sub-interfaces, assing tags, vlans, and zones to each. Was hoping to do this with ansible since that's our automation platform.

Any thoughts on the best way to do this with ansible? Maybe load_cfg or some other strategy?

Thanks

-Steve

Re: Ansible for interfaces on PA

jacksonp — Sun, 18 Jun 2017 21:42:10 GMT

Notably, no one seems to monitor and get answers for customers on these forums.

Anyone know if Palo plans to offer a fully functioning ansible module any time soon?

Re: Ansible for interfaces on PA

ibojer — Mon, 19 Jun 2017 16:27:40 GMT

The current panos_interface module exposes DHCP functionality of the data-plane. We are working on adding more parameters that can be configured. If there is a specific need can you list parameters of interest in the issue page?

https://github.com/PaloAltoNetworks/ansible-pan/issues

Re: Ansible for interfaces on PA

AuSimonPA — Tue, 27 Jun 2017 06:01:55 GMT

Hey there,

I'm rapidily onbaording my palo devices to our ansible setup but I feel its a bit limited compared to the API calls I can make from scripts. Is there a plan to bring the feature set up to the same standard or is it done as and when its need by an individual and passed openly to everyone else?

I can script but I don't think I can get to the level I'll need to be at to program. Nor do I think I want to go that far.

Cheers

Simon

Re: Ansible for interfaces on PA

ibojer — Mon, 10 Jul 2017 15:44:07 GMT

Ansible was never meant to cover 100% of the API as that is not purpose of it. However we do want to get 60-70% coverage for the common automation tasks and we belive we are close. What is that you are missing from current Ansible modules? Can you please submit request here (https://github.com/PaloAltoNetworks/ansible-pan/issues) and we will consider it for enhancement.

Regards,