01-08-2020 04:13 AM
Hi everyone,
I was just able to batch add address objects via the cli on Panorama and now I want to add those addresses to an address group that I created. I tried using the command that Palo gives us for firewalls (shown below), but it does not work. I tried modifying the command by adding the location/device group, but that does not work either. Does anyone know if there is a command to do this in Panorama?
# set address-group testgroup static test1
01-08-2020 12:39 PM - edited 01-08-2020 12:54 PM
This worked for me in Panorama:
set device-group <DG name> address 10.1.1.0 ip-netmask 10.1.1.0/24
set device-group <DG name> address 10.1.1.0 description "10.1.1.0-VLAN10"
set device-group <DG name> address-group <AG name> static 10.1.1.0
Hope that helps.
01-08-2020 12:39 PM - edited 01-08-2020 12:54 PM
This worked for me in Panorama:
set device-group <DG name> address 10.1.1.0 ip-netmask 10.1.1.0/24
set device-group <DG name> address 10.1.1.0 description "10.1.1.0-VLAN10"
set device-group <DG name> address-group <AG name> static 10.1.1.0
Hope that helps.
01-08-2020 01:02 PM
Yes, this did work and it saved me a ton of time. Thank you for the help!
01-21-2020 07:55 AM
Can you share the syntax you used to do this? Thanks
01-21-2020 09:47 AM
@drewdown , I'm not sure I understand what you mean. The syntax I used is the one listed above and it's for Panorama. For firewalls it will be slightly different, i.e. no device-groups etc.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!