Adding interfaces to OSPF with Ansible?

[FalkSchoenfeld]

Hi

Now I am able to create l3 interfaces and add them to the VR by ansible. Now I want to add these interfaces to OSPF.

I found modules for configuring static routes, configure basic VR and OSPF parameters like administrative distances, for redistribution and for BGP.

But I found nothing to add interfaces to OSPF. Are the capabilities still missing to panos ansible support, or am I looking wrong?

[JimmyHolland]

Hi @FalkSchoenfeld, you could consider using panos_config_element. There are various ways to get the XML API syntax, listed in one of the bullet points here. Below is an example for enabling OSPF, with some parameters including adding an interface in an OSPF area:

  tasks:
    - name: OSPF config
      paloaltonetworks.panos.panos_config_element:
        provider: "{{ device }}"
        xpath: "/config/devices/entry[@name='localhost.localdomain']/network/virtual-router/entry[@name='{{ virtual_router_name }}']/protocol"
        element: "<ospf><enable>yes</enable><area><entry name='{{ ospf_area }}'><type><normal/></type><interface><entry name='{{ network_interface }}'><bfd><profile>Inherit-vr-global-setting</profile></bfd><enable>yes</enable><passive>no</passive><gr-delay>10</gr-delay><metric>10</metric><priority>1</priority><hello-interval>10</hello-interval><dead-counts>4</dead-counts><retransmit-interval>5</retransmit-interval><transit-delay>1</transit-delay><link-type><broadcast/></link-type></entry></interface></entry></area><router-id>{{ router_id }}</router-id></ospf>"

Hope that helps

[nikoolayy1]

Also the Ansible URI module can be used to script any tasks that palo alto has not created ansible functions but as @JimmyHolland  mentioned better use the build in functions when you have them as with the URI module you will need also use the correct HTTP headees, so things like like https://paloaltonetworks.github.io/pan-os-ansible/modules/panos_type_cmd_module.html as this is another option to configure stuff together withhttps://paloaltonetworks.github.io/pan-os-ansible/modules/panos_config_element_module.html  that was already shared to you. For operational commands that config ones Palo Alto is more easier to work with Ansible with the module https://paloaltonetworks.github.io/pan-os-ansible/modules/panos_op_module.html .

If you got you answer please "Accept the solution"

https://docs.ansible.com/ansible/latest/collections/ansible/builtin/uri_module.html