If I have two devices in the same Template-Stack, will member template enforce same setting on both devices including i.e. same L3 addresses ? This is what I want to avoid
Solved! Go to Solution.
if one of the templates in that stack defines L3 IP addressing for an interface, it applies to all the devices assigned to that template stack.
since the concept behind the template stack is you can combine bits and pieces of various templates to apply partial configs to selected devices, ultimately you should have a unique stack for each device, or HA pair of devices. it just gives you the benefit of being able to create partial templates (snippets) that you can re-use across multiple template stacks.
Yeah, makes sense. I also found excellent article about using multiple templates. Method 3 (Use template stacks) is the way to go for myself. The comment reads 'PAN-OS 7.0.X only' but I think it author meant 7+
yes, definitely applies to 7.0+ (and 8).
you may also want to seek out the free self paced training for Panorama in the Palo Alto Networks Education website. the whole thing is just 2 hours or so, but there's a section on template stacks which helps demonstrate how the policies are applied when using multiple templates.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!