10-13-2019 09:11 AM
10-14-2019 10:14 AM
Not yet, this is still a pending feature request for the Ansible role:
https://github.com/PaloAltoNetworks/ansible-pan/issues/90
I'd recommend commenting or thumbs-up'ing the original issue opener, so that Palo Alto Networks has a way to see how many users want a particular issue / feature request.
04-24-2020 02:42 AM - edited 04-24-2020 02:50 AM
A bit late on the topic but I created a playbook sometime ago to perform backups of PAN FWs
https://github.com/wpacket/pan-ansible/blob/master/pan_config_pull.yml
Had to reuse it today and I can confirm it still works ( Python3 + Ansible 2.9.7 )
I also put a playbook to push local configs to devices from the same inventory but I guess you already have that
https://github.com/wpacket/pan-ansible/blob/master/pan_config_push.yml
Regards
05-02-2020 05:26 AM
Is there any reason to use this insted of the built in backup function with scp?
05-12-2020 11:16 AM
Hi @sylvaing
I'm also using Ansible 2.9.7
However the play fails at the "Extract API Key from XML Output" task with error "fatal: [x.x.x.x]: FAILED! => {"msg": "The task includes an option with an undefined variable. The error was: 'dict object' has no attribute 'content'\n\n"
No changes done on the playbook besides referencing my host group
Thank you
John.
05-12-2020 12:01 PM
Upgrading to python 3 doesn't help as well
05-14-2020 05:53 AM
Hi @hbalzac
If you only manage PAN firewalls , no.
However if you are dealing with a multivendor setup , using ansible as a central point of automation ( backup , config , ops ) can simplify your life.
05-14-2020 05:55 AM
Hi @jmolefe
Interresting , this might be related to the format of the API KEY response from the firewall. I ve been dealing with 8.1 and 9.0 atm when creating this playbook mostly. What version are you running on your firewall ?
Sylvain
05-14-2020 06:09 AM
Hi @sylvaing
Firewalls run 8.1 and Panorama is on 9.0 and both fail. Please see format of API response below
05-14-2020 08:54 AM
Hi @jmolefe
Can you -vvv you ansible-playbook command and show me the output of the Generate API Key task ?
I bet it is not formated as mine and that must be the reason why the API key cannot be extracted. Or maybe one ansible module is missing.
Let s figure that out,
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!