IP-address is considered to be invalid in PBF policy as a forwarding next hop in ansible

[Bhargav_2784]

hi ,

i'm trying to create PBF using ansible module , but looks like it doesn't take "forward_next_hop_type" doesnt take a value as a "ip-address" and even "forward_next_hop_value" doesnt considered as given in task...

ansible-task:

- name: pbf policy
panos_pbf_rule:
provider: '{{ provider }}'
name: '{{ vendor_name }}_AWS-VPN-PBF-1'
from_value: ['SR1_Zone']
destination_addresses: ["{{ object.results[0].before.name }}","{{ object.results[1].before.name }}"]
action: 'forward'
forward_egress_interface: 'tunnel.1'
forward_next_hop_type: 'ip-address'
forward_monitor_profile: 'Default_AWS-tunnelmonitor'
forward_monitor_ip_address: '4.4.4.4'
forward_next_hop_value: ['{{ tunnel_address_1 }}']

[JimmyHolland]

Hi @Bhargav_2784, 

Is this a duplicate of the other question?

Thanks

[Bhargav_2784]

no this is new question..

[JimmyHolland]

Ok, well the answer is the same as the other question (https://live.paloaltonetworks.com/t5/automation-api-discussions/forward-next-hop-type-gets-failed-in...😞

Per the docs, the value for "forward_next_hop_value" needs to be a string, not a list of strings. Therefore change

forward_next_hop_value: ['{{ tunnel_address_1 }}']

to

forward_next_hop_value: '{{ tunnel_address_1 }}'

Hope that helps!