Configuring IPSEC VPN using API

[hchavunduka]

Can someone help with ideas on how to configure a VPN via API?

[emyl79]

Hi, have you tried the following?

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-panorama-api/get-started-with-the-pan-os-xml-api...

[BPry]

@hchavunduka,

What exactly are you having troubles with? You can use the API-Browser available at https://<firewall-ip>/api to actually go through and figure out the xpath for what you want to modify; that along with the documentation that @emyl79 linked to should get you pointed in the right direction. 

[hchavunduka]

@BPry thank you for the pointers. Why is it that when you issue a command for config audit on running config and candidate config the versions are identical?

https://1.1.1.1/api/?type=config&action=get&xpath=/config/devices/entry\[@name='localhost.localdomain
'\]/network/ike/gateway/entry\[@name='gcp-creative-to-colo-api'\]/peer-address/ip/member\[@name='102.188.204.236'\]"

[hchavunduka]

@emyl79 thank you!