topic Re: Configuring IPSEC VPN using API in Automation/API Discussions

Configuring IPSEC VPN using API

hchavunduka — Fri, 07 Feb 2020 20:04:32 GMT

Can someone help with ideas on how to configure a VPN via API?

Re: Configuring IPSEC VPN using API

emyl79 — Fri, 07 Feb 2020 21:01:06 GMT

Hi, have you tried the following?

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-panorama-api/get-started-with-the-pan-os-xml-api/explore-the-api/use-the-web-interface-to-find-xml-api-syntax.html

Re: Configuring IPSEC VPN using API

BPry — Fri, 07 Feb 2020 21:06:48 GMT

@hchavunduka,

What exactly are you having troubles with? You can use the API-Browser available at https://<firewall-ip>/api to actually go through and figure out the xpath for what you want to modify; that along with the documentation that @emyl79 linked to should get you pointed in the right direction.

Re: Configuring IPSEC VPN using API

hchavunduka — Thu, 20 Feb 2020 21:31:12 GMT

@BPry thank you for the pointers. Why is it that when you issue a command for config audit on running config and candidate config the versions are identical?

https://1.1.1.1/api/?type=config&action=get&xpath=/config/devices/entry\[@name='localhost.localdomain
'\]/network/ike/gateway/entry\[@name='gcp-creative-to-colo-api'\]/peer-address/ip/member\[@name='102.188.204.236'\]"

Re: Configuring IPSEC VPN using API

hchavunduka — Thu, 20 Feb 2020 21:33:01 GMT

@emyl79 thank you!