In my network we tag certain IP addresses for various reasons on our Palo Alto's. Sometimes we will get a large batch of these that need to be done and manually creating an address object and then tagging it via the GUi can be time consuming (to say the least).
I'm wondering if there is a way to add these object groups and tag them via the CLI.
I'm running a Panorama with an HA pair of physical boxes if that makes a difference.
I think you want to use the set address / address-group commands in CLI (in configuration mode) :
> configure # set address # set address <name> tag [ <tag1> <tag2>... ] # set address-group <name> tag [ <tag1> <tag2>... ]
Hope this helps !
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!