topic Re: Settings inheritance thru Template-Stack ? in General Topics

Settings inheritance thru Template-Stack ?

niuk — Thu, 13 Apr 2017 18:08:27 GMT

If I have two devices in the same Template-Stack, will member template enforce same setting on both devices including i.e. same L3 addresses ? This is what I want to avoid

Re: Settings inheritance thru Template-Stack ?

bradk14 — Thu, 13 Apr 2017 20:07:45 GMT

if one of the templates in that stack defines L3 IP addressing for an interface, it applies to all the devices assigned to that template stack.

since the concept behind the template stack is you can combine bits and pieces of various templates to apply partial configs to selected devices, ultimately you should have a unique stack for each device, or HA pair of devices. it just gives you the benefit of being able to create partial templates (snippets) that you can re-use across multiple template stacks.

Re: Settings inheritance thru Template-Stack ?

niuk — Fri, 14 Apr 2017 11:23:52 GMT

Yeah, makes sense. I also found excellent article about using multiple templates. Method 3 (Use template stacks) is the way to go for myself. The comment reads 'PAN-OS 7.0.X only' but I think it author meant 7+

Re: Settings inheritance thru Template-Stack ?

bradk14 — Fri, 14 Apr 2017 14:03:45 GMT

yes, definitely applies to 7.0+ (and 8).

you may also want to seek out the free self paced training for Panorama in the Palo Alto Networks Education website. the whole thing is just 2 hours or so, but there's a section on template stacks which helps demonstrate how the policies are applied when using multiple templates.