topic Re: Find where is the address in Active/Active config in Automation/API Discussions

Find where is the address in Active/Active config

RobertoLio — Wed, 24 Mar 2021 14:47:49 GMT

I would like to automate a failover on a couple of Linux servers that use keepalived and I need to find where is my floating IP using API or scriptable things.

I have read something on my PA700 API page, but I cannot find something describing where is a specific floating IP

Has anyone found a way to found it?

Re: Find where is the address in Active/Active config

JimmyHolland — Thu, 25 Mar 2021 15:00:30 GMT

Here's an example PAN-OS XML API call to get all the floating addresses:

https://{{host}}/api?key={{key}}&type=config&action=show&xpath=/config/devices/entry[@name='localhost.localdomain']/deviceconfig/high-availability/group/mode/active-active/virtual-address

If you want a specific interface's floating address, try something like this, where interface-name might be ethernet1/1 for example:

https://{{host}}/api?key={{key}}&type=config&action=show&xpath=/config/devices/entry[@name='localhost.localdomain']/deviceconfig/high-availability/group/mode/active-active/virtual-address/entry[@name='{{interface-name}}']/ip

It will look like this:

Re: Find where is the address in Active/Active config

RobertoLio — Tue, 30 Mar 2021 14:06:19 GMT

HI @JimmyHolland

thanks for sharing the API path for active-active configuration

we did several tests getting the configuration from different PA and different interface, but we can see just the configuration of our interface.

When we shut down one of our Firewalls, searching on the different APIs, I could not find any information about where the floating IP is at that moment.

I was able to track down who owns the individual interface and who is the master, but nothing about where the floating IP is.

Re: Find where is the address in Active/Active config

JimmyHolland — Fri, 02 Apr 2021 09:25:55 GMT

Sorry @RobertoLio, I misunderstood the question. I'll take a look at this and see if I can find a solution.

Re: Find where is the address in Active/Active config

RobertoLio — Fri, 02 Apr 2021 09:27:27 GMT

Thanks @JimmyHolland !