topic Re: Export in General Topics

Export

oitspa — Tue, 14 Aug 2012 06:02:56 GMT

Hello, is there any posibility how to export list of computers from Objects - Address Groups. I have there one group of computers FQDN specification and I would like to export it.

Thanks for advice

Brano

Re: Export

mikand — Mon, 20 Aug 2012 22:36:34 GMT

I guess this should be possible with the XML API.

Re: Export

ksteves1 — Tue, 21 Aug 2012 00:38:17 GMT

Not sure exactly what you are trying to do, but using PAN-perl and PAN-ksteves both posted in DevCenter you can do stuff like this to export address and address-group objects. And you can customize or write new templates if you want.

$ panxapi -t pa-200 -gxr /config/devices/entry/vsys/entry/address |

> ./panconf.py --config - --json |

> ./panjsont.py --json - --jt ../jsont/address-cli.jsont

get: success

set address net5501 ip-netmask 172.29.9.109/32

set address net5501 description "ssh gateway"

set address ns5gt ip-netmask 172.29.9.126/32

set address ns5gt description "exterior firewall"

set address ibase3 ip-netmask 172.29.9.101/32

set address foo fqdn bar

set address foo2 ip-range 10.1.1.1-10.1.1.5

set address "foo bar" fqdn google.com

# No address-group entries

$ panxapi -t pa-200 -gxr /config/devices/entry/vsys/entry/address-group |

> ./panconf.py --config - --json |

> ./panjsont.py --json - --jt ../jsont/address-cli.jsont

get: success

# No address entries

set address-group bastion-hosts [ ibase3 net5501 ]

set address-group foo3 [ foo2 ns5gt ]

Re: Export

mike_lutgen — Sat, 25 Aug 2012 21:47:40 GMT

Hi Brano,

You can also export these using the following process:

1. SSH to the firewall and run the command set cli config-output-format set

2. Enter the command configure to enter configuration mode and run the command show address-group <address-group object name>

This will display the section of the configuration relating to that address group, you can copy it out from there and do what you like with it. It will display in set commands, so if you wanted to create that address-group on other PAN firewalls, you could just paste the group of set commands into the CLI and it will be created (you will have to create the address objects first though, to export those from the config as well, run show address <address object name>).

Mike