topic Re: Pulling interface and zone details for an IP using PAN device framework in Automation/API Discussions

Pulling interface and zone details for an IP using PAN device framework

deepak12 — Thu, 30 Jan 2020 07:08:40 GMT

@btorresgil and all ,

I am trying to pull interface and zone details for an IP using PAN device framework.

Could you please help me on this. My end goal is to run test_security match cmd to find if rule is allow or not .

Current i can do this using fw.op() but i need to put pull zone details manually .

Thanks

Re: Pulling interface and zone details for an IP using PAN device framework

gfreeman — Fri, 31 Jan 2020 00:24:32 GMT

If you're using pandevice, there's a function for this specifically:

https://pandevice.readthedocs.io/en/latest/module-base.html#pandevice.base.PanDevice.test_security_policy_match

Re: Pulling interface and zone details for an IP using PAN device framework

deepak12 — Fri, 31 Jan 2020 05:55:01 GMT

Hi @gfreeman ,

Yeah , I am using thing . However i was referring Pulling details regrading Zone details for an IP.

Currently i need to verify Zone for an IP from firewall using cli and entering details in function .

I am trying to pull interface and zone details for an IP using pandevice.

Re: Pulling interface and zone details for an IP using PAN device framework

deepak12 — Tue, 04 Feb 2020 17:02:18 GMT

@gfreeman ,

HI ,

Just checking if you can help me on this.

Re: Pulling interface and zone details for an IP using PAN device framework

gfreeman — Tue, 04 Feb 2020 19:00:00 GMT

So if you get the info from the CLI, then just mimic what command the CLI uses with pandevice and then you can invoke the function.

You can see what op command the CLI is executing by doing cli debug enable before executing the command, then styling your pandevice fw.op() similarly.

Re: Pulling interface and zone details for an IP using PAN device framework

deepak12 — Wed, 05 Feb 2020 18:46:32 GMT

HI ,@gfreeman

Thanks for helping me on this . So i tried but getting below erroro:

"PanURLError: URLError: code: 400 reason: Illegal parameter [request]"

I tried to use fw.op() . As mentioned by you i enable the debug and got below :

<request cmd="op" cookie="9191129909288394" uid="1003"><operations><test><routing><fib-lookup><virtual-router>default</virtual-router><ip>10.1.1.1</ip></fib-lookup></routing></test></operations></request>

Could you please confirm me the value i need to pass for Op function .

i was trying using below:

test><routing><fib-lookup><virtual-router>default</virtual-router><ip>10.1.1.1</ip></fib-lookup></routing></test>

Thanks

Re: Pulling interface and zone details for an IP using PAN device framework

gfreeman — Mon, 10 Feb 2020 19:31:41 GMT

You have a few options for how to pass it in.

1. Have pandevice create the XML command:

fw.op('test routing fib-lookup virtual-router "default" ip "10.1.1.1"')

2. Pass in the XML command yourself:

fw.op('<test><routing><fib-lookup><virtual-router>default</virtual-router><ip>10.1.1.1</ip></fib-lookup></routing></test>', cmd_xml=False)

Re: Pulling interface and zone details for an IP using PAN device framework

deepak12 — Wed, 12 Feb 2020 13:58:01 GMT

@gfreeman

Thanks for your help . 🙂