Config (XML) import to device, using Panorama

Reply
Highlighted
L1 Bithead

Config (XML) import to device, using Panorama

, XML

Dear all,

The Panorama feature "Scheduled Config Export" is a great way to backup all device configs to a central backup repository.

I known one can import this XML config from the device itself,

But would there also be a way to import  the complete XML files to respective device USING panorama?

Thanks,

Wim

L4 Transporter

Re: Config (XML) import to device, using Panorama

It's not to possible do a "device config import" from Panorama, as far as I know. Panorama can only push device group and template configuration, not the whole XML file.

I guess maybe it will be possible to write something with the API to do something similar.

L3 Networker

Re: Config (XML) import to device, using Panorama

there is a package called PAN-ksteves on DevCenter with a program

called panto.py that may be useful and uses the panxapi program from

PAN-perl.  Here is a section from the documentation:

panto.py can be used to assist with the process of migrating PAN-OS

device and VSYS configurations to Panorama.

Its input is a configuration file which specifies the XPath nodes on

the PAN-OS device to migrate, and the corresponding XPath node on the

Panorama where the configuration will be migrated to. Its output is a

set of panxapi commands that can be selectively executed which use the

XML API to show and delete the configuration on PAN-OS, and set the

configuration on Panorama.

Sample input:

migrate from-xpath /config/shared/log-settings/email to-xpath /config/shared/log-settings

Sample output:

# migrate from-xpath /config/shared/log-settings/email to-xpath /config/shared/log-settings

panxapi -t pa-200 -sxr "/config/shared/log-settings/email" >tmpnNeNjR_email.xml

panxapi -t panorama -S ./tmpnNeNjR_email.xml "/config/shared/log-settings"

panxapi -t pa-200 -d "/config/shared/log-settings/email"

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!