topic Re: Adding Zones/Tags with XML API in Automation/API Discussions

Adding Zones/Tags with XML API

ScottHammond — Tue, 12 May 2020 16:52:50 GMT

So I have been REPLACING tags and zones with the xml API with great success. What I have yet to do is figure out how to ADD tags or zones without disturbing the existing objects...or even replace them with multiple tags/zones

Working replacement of a zone-

xpath=/config/devices/entry[@name='localhost.localdomain']/device-group/entry[@name='{{Location}}']/post-rulebase/security/rules/entry[@name='{{Name}}']/from/member&element=<member>gp_vpn_general</member>

This works to replace a single zone....fails if you run it against a rule with multiple zones.

I've tried putting multiple members in the element but it only sees and inserts the first one

That puts the vpn zone in and ignores the pci zone, if I switch them it will put the pci zone in and ignore the vpn zone.

So the function seems a 1 for 1 REPLACE

Can anyone nudge me in the direction for making additions?

Re: Adding Zones/Tags with XML API

JoergSchuetter — Tue, 12 May 2020 17:53:17 GMT

Hello @ScottHammond

What happens if you add the zones one by one (instead of all at once)?

If I remember it right, there are several ways to call the API. Are you using a "simple" POST or are you different various http methods?

Re: Adding Zones/Tags with XML API

ScottHammond — Tue, 12 May 2020 19:20:50 GMT

Doing a POST

If I run it again it replaces whatever is there one for one.

THis is using the edit function. (set doesnt work because the rule already exists)

I see there is a method to add multiple members to address groups via the API, and you would think it would be the same for zones...but no joy

Re: Adding Zones/Tags with XML API

ScottHammond — Tue, 12 May 2020 20:59:52 GMT

If I add zones from the cli with a debug running (clearing running a set command) the debug says

<request cmd="set" obj="/config/devices/entry[@name='localhost.localdomain']/device-group/entry[@name='Location']/post-rulebase/security/rules/entry[@name='Name']/from" cookie="8038565277332854"><member>gp_vpn_general</member></request>

So I changed my xpath to

xpath=/config/devices/entry[@name='localhost.localdomain']/device-group/entry[@name='Location']/post-rulebase/security/rules/entry[@name='Name']/from/<member>gp_vpn_general</member>

and Postman give me this error-

<msg>

<line>Could not find schema node for xpath /config/devices/entry[@name='localhost.localdomain']/device-group/entry[@name='Location']/post-rulebase/security/rules/entry[@name='Name']/from

<member>gp_vpn_general</member>

</line>

</msg>

</response>

Could not find schema node for xpath

Re: Adding Zones/Tags with XML API

ScottHammond — Tue, 12 May 2020 21:12:05 GMT

Okay so that didnt look right and I changed it to

/from/member&element=<member>gp_vpn_general</member>

resulting in

<msg>

<line>

<![CDATA[ needs to have non NULL value]]>

</line>

</msg>

</response>

Re: Adding Zones/Tags with XML API

ScottHammond — Fri, 22 May 2020 16:24:38 GMT

So the fix was that I needed to expand the element to include not only the member but the "from"

after that. Poof!