topic Re: Batch add address objects to address group in Panorama? in Automation/API Discussions

Batch add address objects to address group in Panorama?

kamorris — Wed, 08 Jan 2020 12:13:48 GMT

Hi everyone,

I was just able to batch add address objects via the cli on Panorama and now I want to add those addresses to an address group that I created. I tried using the command that Palo gives us for firewalls (shown below), but it does not work. I tried modifying the command by adding the location/device group, but that does not work either. Does anyone know if there is a command to do this in Panorama?

Assign the address object to an address group:
```
# set address-group testgroup static test1
```

Re: Batch add address objects to address group in Panorama?

cfistik — Wed, 08 Jan 2020 20:54:43 GMT

This worked for me in Panorama:

set device-group <DG name> address 10.1.1.0 ip-netmask 10.1.1.0/24 set device-group <DG name> address 10.1.1.0 description "10.1.1.0-VLAN10" set device-group <DG name> address-group <AG name> static 10.1.1.0

Hope that helps.

Re: Batch add address objects to address group in Panorama?

kamorris — Wed, 08 Jan 2020 21:02:25 GMT

Yes, this did work and it saved me a ton of time. Thank you for the help!

Re: Batch add address objects to address group in Panorama?

drewdown — Tue, 21 Jan 2020 15:55:53 GMT

Can you share the syntax you used to do this? Thanks

Re: Batch add address objects to address group in Panorama?

cfistik — Tue, 21 Jan 2020 17:47:45 GMT

@drewdown , I'm not sure I understand what you mean. The syntax I used is the one listed above and it's for Panorama. For firewalls it will be slightly different, i.e. no device-groups etc.

Re: Batch add address objects to address group in Panorama?

btorresgil — Tue, 21 Jan 2020 22:41:20 GMT

I know this topic is on CLI, not API, but since it's in the API discussion board, here's a convenient way to bulk add Address Object and Groups via API for anyone who happens upon this thread in the future:

https://pandevice.readthedocs.io/en/latest/howto.html#optimize-with-bulk-operations

This example uses python.

Re: Batch add address objects to address group in Panorama?

MIPANUser — Wed, 01 Sep 2021 21:53:12 GMT

how we could validate any address or address group through cli?

Re: Batch add address objects to address group in Panorama?

ekupara — Fri, 03 Dec 2021 10:22:13 GMT

Many thanks for this solution..

Just one quick question - any idea how to create these objects straight into the "Shared" device-group - the command doesn't list it as one of available device-groups to choose from?

Re: Batch add address objects to address group in Panorama?

FBMTRAV — Mon, 13 Dec 2021 13:08:13 GMT

The command to show the shared address-group, "My_Address_Group" in version 9.1 is;

show shared address-group My_Address_Group

Unfortunately the list only includes the address-object names. I'm curious to know if there's a way to show the address-group and the IP address for each address-object.

Re: Batch add address objects to address group in Panorama?

FBMTRAV — Mon, 13 Dec 2021 13:24:13 GMT

If you're trying to do this in CLI, it looks like this is your command;

Panorama# set shared address-group My_Address_Group static [ Member_1 Member_2 ]