topic Re: Exporting NAT configuration in General Topics

Exporting NAT configuration

jsilvia — Mon, 12 Nov 2012 18:49:18 GMT

So I'm wanting to get the XML out of the firewall for specific DMZ's so that I can assemble IPAM updates from the XML.

Right now, if I ssh into Panorama, go into config mode, and issue this command:

show device-group DMZ pre-rulebase nat rules

Then I get the output I want, however, doing it interactively isn't what I want - what I'd like to do is convert this into an API call, so I can fetch this with a URL...

Using the API browser however, I cannot seem to duplicate this..export

Re: Exporting NAT configuration

cviaud — Tue, 13 Nov 2012 16:17:21 GMT

Hi,

You can use that url :

/api/?type=op&cmd=<show><config><running><xpath>devices/entry[@name='localhost.localdomain']/device-group/entry[@name='DMZ']/pre-rulebase/nat</xpath></running></config></show>

go on http://YOUR.PANORAMA.IP/php/rest/browse.php/op::show::config::running::xpath

change the xml content with:

<show><config><running><xpath>devices/entry[@name='localhost.localdomain']/device-group/entry[@name='DMZ']/pre-rulebase/nat</xpath></running></config></show>

click submit

regards

Re: Exporting NAT configuration

jsilvia — Tue, 13 Nov 2012 17:06:52 GMT

Yeah, took me another hour of digging, but I eventually found it.

The trick was to get a full copy of the config downloaded locally and view it in Notepad++ in XML mode, then I started collapsing the config elements so that I was only viewing from levels 1 through 5 - and thats when I could see the path....

<device-group>

<pre-rulebase>

<nat>

XML and I definitely have a love/hate relationship.