topic Re: Anyone else notice these "Load Config Partial" syntax changes in PAN-OS 9.0? in General Topics

Anyone else notice these "Load Config Partial" syntax changes in PAN-OS 9.0?

GregTaylor — Mon, 20 May 2019 19:45:27 GMT

Doing my first migration to PAN-OS 9.0. We've migrated the config using expedition, but when I try to use the load config partial commands I keep getting a "Invalid syntax." error

Example on how it used to work-

load config partial from MT-fixed.xml from-xpath /config/devices/entry/vsys/entry/tag to-xpath /config/devices/entry/vsys/entry/tag mode merge

I can get it to work if I change the syntax slightly to -

load config partial mode merge from-xpath /config/devices/entry/vsys/entry/tag to-xpath /config/devices/entry/vsys/entry/tag from MT-fixed.xml

I'm just curious if anyone else has run into this issue? I can't find any documentation around changes to the load config partial in PAN-OS 9.0 so I can't explain why it has suddenly changed its behavior.

Re: Anyone else notice these "Load Config Partial" syntax changes in PAN-OS 9.0?

BPry — Mon, 20 May 2019 20:30:15 GMT

@GregTaylor,

From is now the hard stop in a load config partial command and you won't be able to specify anything after this entry, similar to the profile-setting entry when creating a security rulebase entry from the CLI. Not sure why they decided to change it with 9.0 or if it was even actually intended.

Re: Anyone else notice these "Load Config Partial" syntax changes in PAN-OS 9.0?

CDCT-Security — Wed, 29 Jan 2020 03:06:31 GMT

This was a documented change with PAN-OS 9.0 : https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-cli-quick-start/use-the-cli/load-configurations/load-a-partial-configuration.html