need help to define static route using ansible for next-vr...

[Bhargav_2784]

hi ,

i'm trying to create static route with next hop type as a "next-vr" , and as a interface "None" in ansible. but seems like i'm getting an error for nexthop and interface...

sample playbook:

  - name: Create route to aws tunnel-1
    panos_static_route:
          provider: '{{ provider }}'
          name: "Route {{ item.id }} to {{ vendor_name }}"
          destination: '{{ item.vpc_net }}'
          interface: 'None'
          nexthop: 'next-vr'
          nexthop_type: 'none'
          virtual_router: 'SR1'

getting below error:

{"ansible_loop_var": "item", "changed": false, "item": {"id": 1, "vpc_net": "20.0.0.0/24"}, "msg": "Failed create: Route 1 to ansible-test -> interface 'None' is not a valid reference\n Route 1 to ansible-test -> interface is invalid"}

here is the original module for panos_static_route on ansible docx...

https://ansible-pan.readthedocs.io/en/latest/modules/panos_static_route_module.html

can you please let me know what i'm misisng here, it works absolutely fine with GUI...

thanks...!!

[JimmyHolland · Accepted solution]

Hi @Bhargav_2784,

Per the docs (by the way, for your bookmarks, the current docs are https://paloaltonetworks.github.io/pan-os-ansible not https://ansible-pan.readthedocs.io) you only have to make a couple of changes:

• nexthop should be the name of the VR which is the next hop, which per your code is probably not 'next-vr' but something else?
• nexthop_type should not be 'none', it should be the string 'next-vr', per the docs (https://paloaltonetworks.github.io/pan-os-ansible/modules/panos_static_route_module.html)
• virtual_router should be the VR into which you are placing this static route
• interface does not need to be defined at all, comment it out or remove it

An example from your code:

  - name: Create route to aws tunnel-1
    panos_static_route:
          provider: '{{ provider }}'
          name: "Route {{ item.id }} to {{ vendor_name }}"
          destination: '{{ item.vpc_net }}'
          #interface: 'None'
          nexthop: '{{ your-next-vr }}'
          nexthop_type: 'next-vr'
          virtual_router: '{{ the-vr-requiring-the-route }}'

Hope this helps!

[Bhargav_2784]

thanks @JimmyHolland  , that works...