topic Deleting interface + dhcp relay using ansible in Automation/API Discussions

Deleting interface + dhcp relay using ansible

batchenr — Wed, 01 Jun 2022 08:45:39 GMT

Hello,

Versions in use:

ansible 2.9.22
pan-python==0.19.0
pandevice==0.14.0
panos firewall 9.1.10

I have created a playbook that adds a DHCP relay element and now i need to do the delete the DHCP relay and haven't found the way.
This is the playbook for adding one:

---
- name: DHCP
hosts: localhost
connection: local
vars:
- ansible_python_interpreter: /usr/bin/env python3
roles:
- role: PaloAltoNetworks.paloaltonetworks
gather_facts: False
tasks:
- name: Grab the credentials
include_vars: 'firewall-secrets.yml'
- name: Create DHCP relay on interface
panos_type_cmd:
ip_address: '{{ ip_address }}'
username: '{{ username }}'
password: '{{ password }}'
cmd: "set"
xpath: "/config/devices/entry[@name='localhost.localdomain']/network/dhcp/interface/entry[@name='a5.22']/relay"
element: "<ip><server><member>10.x.x.x1</member></server><enabled>yes</enabled></ip><ip><server><member>10.x.x.x2</member></server><enabled>yes</enabled></ip>"

When trying to delete i have used this:

tasks:
- name: delete DHCP relay on interface
panos_type_cmd:
ip_address: '{{ ip_address }}'
username: '{{ username }}'
password: '{{ password }}'
cmd: "delete"
xpath: "/config/devices/entry[@name='localhost.localdomain']/network/dhcp/interface/entry[@name='a5.22']/relay"

Ansible verbose doesn't give any error,
Its only getting the firewall stuck(i cannot preform any commits until I delete the change) , The main task is to remove the interface "a5.22" using panos_l3_subinterface module. but it doesn't give me to delete a device before I delete the relay.
there is no docs for this - does anyone know how?

Thanks.

Re: Deleting interface + dhcp relay using ansible

batchenr — Mon, 13 Jun 2022 10:24:01 GMT

Hey,

no it is not resolved if i figure this out ill post here 🙂

Re: Deleting interface + dhcp relay using ansible

JimmyHolland — Mon, 12 Sep 2022 13:29:08 GMT

Hi @batchenr, when adapted to my lab, the code you posted works ok for me:

- name: Create DHCP relay on interface paloaltonetworks.panos.panos_type_cmd: provider: "{{ device }}" cmd: "set" xpath: "/config/devices/entry[@name='localhost.localdomain']/network/dhcp/interface/entry[@name='{{ interface }}']/relay" element: "<ip><server><member>{{ relay_ip_1 }}</member><member>{{ relay_ip_2 }}</member></server><enabled>yes</enabled></ip>" - name: delete DHCP relay on interface paloaltonetworks.panos.panos_type_cmd: provider: "{{ device }}" cmd: "delete" xpath: "/config/devices/entry[@name='localhost.localdomain']/network/dhcp/interface/entry[@name='{{ interface }}']/relay"