topic Ansible - unable to add new firewall to Panorama in Automation/API Discussions

Ansible - unable to add new firewall to Panorama

mdsmith82 — Tue, 05 May 2020 14:09:24 GMT

Any suggestions here is much appreciated. Brand new firewall built in AWS- I am able to interact with the firewall with ansible using the paloalto role - the only thing that is giving me fits is setting the primary panorama server IP.

Here is my (abbreviated) playbook

--- # Initial config - hosts: panos connection: local gather_facts: False roles: - role: paloaltonetworks.paloaltonetworks vars: pafw: username: '{{ username }}' password: '{{ password }}' ip_address: '{{ inventory_hostname }}' tasks: - name: Grab the credentials from ansible-vault include_vars: firewall-secrets.yml no_log: 'yes' - name: MgtConfig panos_mgtconfig: provider: '{{ pafw }}' dns_server_primary: "8.8.8.8" dns_server_secondary: "4.4.4.4" ntp_server_primary: "0.us.pool.ntp.org" ntp_server_secondary: "1.us.pool.ntp.org" timezone: "US/Eastern" panorama_primary: "128.0.0.1" commit: True

But when I run the playbook, I get an API error

"msg": "Failed to update panorama: Could not get schema node for xpath /config/devices/entry[@name='localhost.localdomain']/deviceconfig/system/panorama-server\n"

Re: Ansible - unable to add new firewall to Panorama

gfreeman — Tue, 05 May 2020 16:43:25 GMT

Update the pandevice python library. PAN-OS 9.1 has changed the locations for the primary and secondary panorama server IP addresses, and the more recent version of pandevice has the new xpath locations.

Re: Ansible - unable to add new firewall to Panorama

mdsmith82 — Tue, 05 May 2020 17:33:08 GMT

Thanks for the suggestion - I have updated with PIP, but this has still not resulted in success.

Re: Ansible - unable to add new firewall to Panorama

GregAdolphson — Tue, 29 Jun 2021 15:21:15 GMT

I have the same exact issue. I have the latest pandevice python library installed. My Palo Alto firewall is on release 10.0.4 and ansible version 2.9.10

Re: Ansible - unable to add new firewall to Panorama

GregAdolphson — Tue, 29 Jun 2021 15:25:28 GMT

Actually, I found the issue. I did not have pan-os-python installed.

pip install pan-os-python