Manage On-prem IPSEC config with PAN TF provider

[pbomma]

Here is my use-case,

We have a bunch of VPCs,VNETs in different cloud providers. When we spin up a VPC, we configure the VPN back to the on prem which is a Palo Alto firewall. The VPN configuration on the Palo alto firewall is manual.

I m wondering if this can automated with TF on our On-prem firewall. basically something like this 

  Interfaces, Routing, VPNs                                                -> Local FW config

    VPNs to cloud.                                                             -> Terraform

    Device-groups, policies etc.                                           -> Panorama

    Generic template (radius config etc.)                                -> Panorama

Has anyone does this before and any feedback.

[gfreeman]

Maybe, depending on what all you need to configure?

The panos provider has over 100 resources (Panorama and Firewall combined), so there's a lot you can do with it.  I'd check out the documentation and see if what you need to configure has resources for it or not:

https://www.terraform.io/docs/providers/panos/index.html

If something is missing, thumbs up / comment on a pre-existing issue, or open a new one if one doesn't already exist:

https://github.com/terraform-providers/terraform-provider-panos