topic Re: Creating a Vsys/VR via CLI in Automation/API Discussions

Creating a Vsys/VR via CLI

dwmaas — Mon, 26 Mar 2018 21:03:05 GMT

Does anyone have a script or a way to implement a new virtural firewall and virtual router via the cli? Does not have to be automatic but would like to get to that point? I have a couple dozen to implement and looking for a quicker way vs via gui.

Thank you

David

Re: Creating a Vsys/VR via CLI

toquothty — Wed, 20 Jun 2018 19:49:25 GMT

@dwmaas are you still looking for this? I have been working on a script to create full tenants via vsys creation and could share that portion of the script if you're still looking

Re: Creating a Vsys/VR via CLI

dwmaas — Wed, 20 Jun 2018 20:47:08 GMT

Hi,

Yes still looking, just dropped down in priorty on my list. But that would be fantastic if you could share what you have.

Thank you

David

Re: Creating a Vsys/VR via CLI

btorresgil — Thu, 21 Jun 2018 15:27:52 GMT

Why use CLI? If you're going for automation, API is usually a much better option. You could use any of our API libraries to do this quickly. Here's an example using the Palo Alto Networks Device Framework:

from pandevice import firewall, device

fw = firewall.Firewall('10.0.1.1', 'admin', 'password', vsys=None)

fw.add(device.Vsys('vsys2', 'My New Vsys1')).create()
fw.add(device.Vsys('vsys3', 'My New Vsys2')).create()
fw.add(device.Vsys('vsys4', 'My New Vsys3')).create()
fw.add(device.Vsys('vsys5', 'My New Vsys4')).create()

fw.commit()

That creates 4 vsys on the firewall. If you need vsys each with their own virtual router you'd do something like this:

from pandevice import firewall, network, device

fw = firewall.Firewall('10.0.1.1', 'admin', 'password', vsys=None)

vr2 = fw.add(network.VirtualRouter('vsys2-vr')
vsys2 = fw.add(device.Vsys('vsys2', 'My New Vsys2'), virtual_routers=[vr2])

vr2.create()
vsys2.create()

fw.commit()

That would give you a new virtual router in a new vsys.

More information:

https://live.paloaltonetworks.com/deviceframework
http://pandevice.readthedocs.io/en/latest/usage.html#working-with-virtual-system
http://pandevice.readthedocs.io/en/latest/module-device.html#pandevice.device.Vsys

Re: Creating a Vsys/VR via CLI

toquothty — Thu, 21 Jun 2018 20:38:03 GMT

@btorresgil This is why it's nice to see others work sometimes. I had a very similar thing to part two I was going to share, but I was defining my variable, then adding it in another line and then creating it in another line. I hadn't even thought about that I could be slimming it down to one line for the add and create!

Re: Creating a Vsys/VR via CLI

dwmaas — Thu, 21 Jun 2018 20:45:20 GMT

Thank you very much, this would work out super, we do what to automate the entire vsys/vr and bgp router configs. So it is not done manually.