Ansible panos_type_cmd | send arbitrary command to firewall via Panorama

Aidar5 — Mon, 18 Jan 2021 19:40:44 GMT

Hello,

I tried to get information from firewall via Panorama using Ansible panos_type_cmd module. But in response I see: "msg": "******** not connected".

Could you someone advise how to debug this or check the correctness of playbook:

---

- hosts: Panorama
connection: local
gather_facts: no

vars:
     provider:
        ip_address: '{{ "Panorama IP" }}'
        username: xxx
        password: yyy
        serial_number: "SN OF END FIREWALL"
   ansible_python_interpreter: /usr/bin/python3.6

tasks:
- name: Show management IP.
    paloaltonetworks.panos.panos_type_cmd:
       provider: '{{ provider }}'
       cmd: 'show'
       xpath: |
          /config/devices/entry[@name='localhost.localdomain']
          /deviceconfig/system/ip-address
    register: response
- debug: msg="{{ response.stdout }}"

This playbook works when connected to firewall itself.

Thank you in advance.

Re: Ansible panos_type_cmd | send arbitrary command to firewall via Panorama

ssandsFLIR — Thu, 11 Feb 2021 23:32:02 GMT

Have to specify device_group? Default is 'shared' which likely will not work as expected

topic Ansible panos_type_cmd | send arbitrary command to firewall via Panorama in Automation/API Discussions

Ansible panos_type_cmd | send arbitrary command to firewall via Panorama

Re: Ansible panos_type_cmd | send arbitrary command to firewall via Panorama