Does anyone know the API XPATH to load partial for static routes?

[Eric_Troldahl]

Hello All!

I'm trying to use Expedition to migrate 100+ virtual systems from old Juniper firewalls my team inherited to our Palo Altos.  We are using Load Partial commands rather than importing the entire Expedition output based on recommendations from Palo Engineers.  Some of my Juniper stuff has large routing tables of static routes, so I want to bring those in from the Expedition .XML file.  I see the static routes in the XML, so I know I am close...

Does anyone know what my XPATH or complete load partial command would look like for a virtual router "vr1"?  In other words, I am trying to do a load partial command that loads static routes defined on the old firewall in "vr1" to a new firewall where the vsys is called "dc-vsys3" and the new virtual routing table is called "dc-vsys3" as well.

[Alejandro_Hernandez · Accepted solution]

You will test with the following command

"load config partial from "file.xml" from-xpath /config/devices/entry[@name='localhost.localdomain']/network/virtual-router to-xpath /config/devices/entry[@name='localhost.localdomain']/network/virtual-router mode merge"

[Eric_Troldahl]

Thanks!

[Eric_Troldahl]

Looks like unless the interfaces are named the same it won't meet my needs.  I may try editing the source XML file.

[fixhour · Accepted solution]

To load static routes, use the load config partial command with the appropriate XPaths. For example:

load config partial from <file-path>.xml from-xpath "/config/devices/entry[@name='localhost.localdomain']/network/virtual-router/entry[@name='vr1']/routing-table/ip/static-route" to-xpath "/config/devices/entry[@name='localhost.localdomain']/network/virtual-router/entry[@name='dc-vsys3']/routing-table/ip/static-route"

This will load the static routes from "vr1" to "dc-vsys3" on your Palo Alto. 
Sonic Happy Hour 

[Eric_Troldahl]

If I also have IPv6 static routes do I just duplicate the command with /routing-table/ipv6/static-route?

I'm not sure if we have any IPv6 static - hoping they enforced BGP for IPv6 - but just in case...

Thanks,

Eric

[Eric_Troldahl]

Thanks!