topic Add network to address group via CLI? in General Topics

Add network to address group via CLI?

jsogla — Tue, 16 Feb 2021 14:05:19 GMT

I am trying to add a network to an address group via CLI on PAN OS 9.1.X

# set vsys vsys2 address-group XXXXXXXX static 108.61.41.0/24

Server error : static '108.61.41.0/24' is not a valid reference

What is the valid syntax?

Re: Add network to address group via CLI?

BPry — Tue, 16 Feb 2021 19:19:24 GMT

@jsogla,

So an address-group is just a list of address objects. You need to create an address object for that ip-netmask prior to including it in the address-group.