topic Re: IP-address is considered to be invalid in PBF policy as a forwarding next hop in ansible in Automation/API Discussions

IP-address is considered to be invalid in PBF policy as a forwarding next hop in ansible

Bhargav_2784 — Mon, 12 Sep 2022 02:03:29 GMT

hi ,

i'm trying to create PBF using ansible module , but looks like it doesn't take "forward_next_hop_type" doesnt take a value as a "ip-address" and even "forward_next_hop_value" doesnt considered as given in task...

ansible-task:

- name: pbf policy
panos_pbf_rule:
provider: '{{ provider }}'
name: '{{ vendor_name }}_AWS-VPN-PBF-1'
from_value: ['SR1_Zone']
destination_addresses: ["{{ object.results[0].before.name }}","{{ object.results[1].before.name }}"]
action: 'forward'
forward_egress_interface: 'tunnel.1'
forward_next_hop_type: 'ip-address'
forward_monitor_profile: 'Default_AWS-tunnelmonitor'
forward_monitor_ip_address: '4.4.4.4'
forward_next_hop_value: ['{{ tunnel_address_1 }}']

Re: IP-address is considered to be invalid in PBF policy as a forwarding next hop in ansible

JimmyHolland — Mon, 12 Sep 2022 07:37:48 GMT

Hi @Bhargav_2784,

Is this a duplicate of the other question?

Thanks

Re: IP-address is considered to be invalid in PBF policy as a forwarding next hop in ansible

Bhargav_2784 — Mon, 12 Sep 2022 17:34:33 GMT

no this is new question..

Re: IP-address is considered to be invalid in PBF policy as a forwarding next hop in ansible

JimmyHolland — Tue, 13 Sep 2022 09:16:36 GMT

Ok, well the answer is the same as the other question (https://live.paloaltonetworks.com/t5/automation-api-discussions/forward-next-hop-type-gets-failed-in-pbf-ansible-module/td-p/514516😞

Per the docs, the value for "forward_next_hop_value" needs to be a string, not a list of strings. Therefore change

forward_next_hop_value: ['{{ tunnel_address_1 }}']

forward_next_hop_value: '{{ tunnel_address_1 }}'

Hope that helps!