topic Re: Adding interfaces to OSPF with Ansible? in Automation/API Discussions

Adding interfaces to OSPF with Ansible?

FalkSchoenfeld — Mon, 19 Dec 2022 14:15:43 GMT

Now I am able to create l3 interfaces and add them to the VR by ansible. Now I want to add these interfaces to OSPF.

I found modules for configuring static routes, configure basic VR and OSPF parameters like administrative distances, for redistribution and for BGP.

But I found nothing to add interfaces to OSPF. Are the capabilities still missing to panos ansible support, or am I looking wrong?

Re: Adding interfaces to OSPF with Ansible?

JimmyHolland — Mon, 09 Jan 2023 14:45:33 GMT

Hi @FalkSchoenfeld, you could consider using panos_config_element. There are various ways to get the XML API syntax, listed in one of the bullet points here. Below is an example for enabling OSPF, with some parameters including adding an interface in an OSPF area:

tasks: - name: OSPF config paloaltonetworks.panos.panos_config_element: provider: "{{ device }}" xpath: "/config/devices/entry[@name='localhost.localdomain']/network/virtual-router/entry[@name='{{ virtual_router_name }}']/protocol" element: "<ospf><enable>yes</enable><area><entry name='{{ ospf_area }}'><type><normal/></type><interface><entry name='{{ network_interface }}'><bfd><profile>Inherit-vr-global-setting</profile></bfd><enable>yes</enable><passive>no</passive><gr-delay>10</gr-delay><metric>10</metric><priority>1</priority><hello-interval>10</hello-interval><dead-counts>4</dead-counts><retransmit-interval>5</retransmit-interval><transit-delay>1</transit-delay><link-type><broadcast/></link-type></entry></interface></entry></area><router-id>{{ router_id }}</router-id></ospf>"

Hope that helps

Re: Adding interfaces to OSPF with Ansible?

nikoolayy1 — Wed, 11 Jan 2023 11:40:09 GMT

Also the Ansible URI module can be used to script any tasks that palo alto has not created ansible functions but as @JimmyHolland mentioned better use the build in functions when you have them as with the URI module you will need also use the correct HTTP headees, so things like like https://paloaltonetworks.github.io/pan-os-ansible/modules/panos_type_cmd_module.html as this is another option to configure stuff together withhttps://paloaltonetworks.github.io/pan-os-ansible/modules/panos_config_element_module.html that was already shared to you. For operational commands that config ones Palo Alto is more easier to work with Ansible with the module https://paloaltonetworks.github.io/pan-os-ansible/modules/panos_op_module.html .

If you got you answer please "Accept the solution"

https://docs.ansible.com/ansible/latest/collections/ansible/builtin/uri_module.html