topic Re: Rule change via CLI in General Topics

Rule change via CLI

rgreens — Mon, 20 Jan 2014 19:58:43 GMT

Is there any way to remove a parameter to a security rule via the CLI? As an example, if I created the following rule:

set rulebase security rules "Test" from inside

Now I want to change inside to outside.

If I use: set rulebase security rules "Test" from outside, I end up with "from [ inside outside ]"

I would prefer not to have to delete the rule and recreate it as I have a bulk change to do and the CLI will be faster than GUI.

Thank you,

Re: Rule change via CLI

HULK — Mon, 20 Jan 2014 20:31:33 GMT

Hello Sir,

As per my knowledge, PAN is not having an option like "replace-pattern" (use in Juniper Firewall) to make any changes, without deleting the same config from CLI. It might come with a future release.

For the time being, you can collect all "set" command from the PAN firewall as mentioned below:

admin@PAN> set cli config-output-format set

admin@PAN> configure

Entering configuration mode

[edit]

admin@PAN# show

Collect the output in a text file/notepad, and modify as per your requirement ( But need to delete the existing one).

Thanks

Re: Rule change via CLI

JimS2 — Mon, 20 Jan 2014 23:49:27 GMT

delete rulebase security rules "Test" from outside

This will leave the inside and remove the outside.