Is it possible to create an object in panorama that can be reused in multiple templates that is literally just tied to the ip of an interface on that device?
For example, eth1/1 has address 220.127.116.11
Object should just reference eth1/1
Object can be used in template that can be reused for multiple devices.
Solved! Go to Solution.
You can create object OUTSIDE.
On every firewall you have local object with same name but public IP of specific location.
On ethernet1/1 you assign object OUTSIDE as IP.
I thought this was solved but after further testing, I'm not sure that it is solving the problem I'm running into specifically.
While being able to put an IP of say 18.104.22.168/29 in object 'external_interface'. If i use the object 'external_interface' in a security policy rule, it hits on the whole subnet instead of the specific address i picked within the subnet. Does this make sense?
Object is 22.214.171.124/29
Rules will hit 126.96.36.199 - 188.8.131.52
I only want rules to hit on 184.108.40.206
I need 220.127.116.11/29 for interface
If you don't need interface IP to be object replace it back with regular IP and change object to /32.
If you do need then create 2 objects. One for interface with /29 and other for security policies with /32
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!