Manage On-prem IPSEC config with PAN TF provider

pbomma — Thu, 27 Feb 2020 22:24:31 GMT

Here is my use-case,

We have a bunch of VPCs,VNETs in different cloud providers. When we spin up a VPC, we configure the VPN back to the on prem which is a Palo Alto firewall. The VPN configuration on the Palo alto firewall is manual.

I m wondering if this can automated with TF on our On-prem firewall. basically something like this

Interfaces, Routing, VPNs -> Local FW config

VPNs to cloud. -> Terraform

Device-groups, policies etc. -> Panorama

Generic template (radius config etc.) -> Panorama

Has anyone does this before and any feedback.

Re: Manage On-prem IPSEC config with PAN TF provider

gfreeman — Mon, 02 Mar 2020 18:23:21 GMT

Maybe, depending on what all you need to configure?

The panos provider has over 100 resources (Panorama and Firewall combined), so there's a lot you can do with it. I'd check out the documentation and see if what you need to configure has resources for it or not:

https://www.terraform.io/docs/providers/panos/index.html

If something is missing, thumbs up / comment on a pre-existing issue, or open a new one if one doesn't already exist:

https://github.com/terraform-providers/terraform-provider-panos

topic Manage On-prem IPSEC config with PAN TF provider in Automation/API Discussions

Manage On-prem IPSEC config with PAN TF provider

Re: Manage On-prem IPSEC config with PAN TF provider