Batch add address objects to address group in Panorama?

[kamorris]

Hi everyone,

I was just able to batch add address objects via the cli on Panorama and now I want to add those addresses to an address group that I created. I tried using the command that Palo gives us for firewalls (shown below), but it does not work. I tried modifying the command by adding the location/device group, but that does not work either. Does anyone know if there is a command to do this in Panorama?

1. Assign the address object to an address group:

   # set address-group testgroup static test1
   

[cfistik · Accepted solution]

This worked for me in Panorama:

set device-group <DG name> address 10.1.1.0 ip-netmask 10.1.1.0/24

set device-group <DG name> address 10.1.1.0 description "10.1.1.0-VLAN10"

set device-group <DG name> address-group <AG name> static 10.1.1.0

Hope that helps.

[cfistik · Accepted solution]

This worked for me in Panorama:

set device-group <DG name> address 10.1.1.0 ip-netmask 10.1.1.0/24

set device-group <DG name> address 10.1.1.0 description "10.1.1.0-VLAN10"

set device-group <DG name> address-group <AG name> static 10.1.1.0

Hope that helps.

[kamorris]

Yes, this did work and it saved me a ton of time. Thank you for the help!

[drewdown]

Can you share the syntax you used to do this?  Thanks 

[cfistik]

@drewdown , I'm not sure I understand what you mean. The syntax I used is the one listed above and it's for Panorama. For firewalls it will be slightly different, i.e. no device-groups etc.

[btorresgil]

I know this topic is on CLI, not API, but since it's in the API discussion board, here's a convenient way to bulk add Address Object and Groups via API for anyone who happens upon this thread in the future:

https://pandevice.readthedocs.io/en/latest/howto.html#optimize-with-bulk-operations

This example uses python.