Batch add address objects to address group in Panorama?

Announcements

ATTENTION Customers, All Partners and Employees: The Customer Support Portal (CSP) will be undergoing maintenance and unavailable on Saturday, November 7, 2020, from 11 am to 11 pm PST. Please read our blog for more information.

Reply
Highlighted
L1 Bithead

Batch add address objects to address group in Panorama?

Hi everyone,

 

I was just able to batch add address objects via the cli on Panorama and now I want to add those addresses to an address group that I created. I tried using the command that Palo gives us for firewalls (shown below), but it does not work. I tried modifying the command by adding the location/device group, but that does not work either. Does anyone know if there is a command to do this in Panorama?

 

  1. Assign the address object to an address group:
    # set address-group testgroup static test1

Accepted Solutions
Highlighted
L1 Bithead

This worked for me in Panorama:

 

set device-group <DG name> address 10.1.1.0 ip-netmask 10.1.1.0/24

set device-group <DG name> address 10.1.1.0 description "10.1.1.0-VLAN10"

set device-group <DG name> address-group <AG name> static 10.1.1.0

 

Hope that helps.

View solution in original post


All Replies
Highlighted
L1 Bithead

This worked for me in Panorama:

 

set device-group <DG name> address 10.1.1.0 ip-netmask 10.1.1.0/24

set device-group <DG name> address 10.1.1.0 description "10.1.1.0-VLAN10"

set device-group <DG name> address-group <AG name> static 10.1.1.0

 

Hope that helps.

View solution in original post

Highlighted
L1 Bithead

Yes, this did work and it saved me a ton of time. Thank you for the help!

Highlighted
L4 Transporter

Can you share the syntax you used to do this?  Thanks 

Highlighted
L1 Bithead

@drewdown , I'm not sure I understand what you mean. The syntax I used is the one listed above and it's for Panorama. For firewalls it will be slightly different, i.e. no device-groups etc.

Highlighted
L4 Transporter

I know this topic is on CLI, not API, but since it's in the API discussion board, here's a convenient way to bulk add Address Object and Groups via API for anyone who happens upon this thread in the future:

 

https://pandevice.readthedocs.io/en/latest/howto.html#optimize-with-bulk-operations

 

This example uses python.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!