- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
07-31-2024 11:26 AM
Hello All!
I'm trying to use Expedition to migrate 100+ virtual systems from old Juniper firewalls my team inherited to our Palo Altos. We are using Load Partial commands rather than importing the entire Expedition output based on recommendations from Palo Engineers. Some of my Juniper stuff has large routing tables of static routes, so I want to bring those in from the Expedition .XML file. I see the static routes in the XML, so I know I am close...
Does anyone know what my XPATH or complete load partial command would look like for a virtual router "vr1"? In other words, I am trying to do a load partial command that loads static routes defined on the old firewall in "vr1" to a new firewall where the vsys is called "dc-vsys3" and the new virtual routing table is called "dc-vsys3" as well.
07-31-2024 01:52 PM
You will test with the following command
"load config partial from "file.xml" from-xpath /config/devices/entry[@name='localhost.localdomain']/network/virtual-router to-xpath /config/devices/entry[@name='localhost.localdomain']/network/virtual-router mode merge"
09-12-2024 07:39 AM
To load static routes, use the load config partial
command with the appropriate XPaths. For example:
load config partial from <file-path>.xml from-xpath "/config/devices/entry[@name='localhost.localdomain']/network/virtual-router/entry[@name='vr1']/routing-table/ip/static-route" to-xpath "/config/devices/entry[@name='localhost.localdomain']/network/virtual-router/entry[@name='dc-vsys3']/routing-table/ip/static-route"
This will load the static routes from "vr1" to "dc-vsys3" on your Palo Alto.
Sonic Happy Hour
07-31-2024 01:52 PM
You will test with the following command
"load config partial from "file.xml" from-xpath /config/devices/entry[@name='localhost.localdomain']/network/virtual-router to-xpath /config/devices/entry[@name='localhost.localdomain']/network/virtual-router mode merge"
08-07-2024 09:18 AM
Looks like unless the interfaces are named the same it won't meet my needs. I may try editing the source XML file.
09-12-2024 07:39 AM
To load static routes, use the load config partial
command with the appropriate XPaths. For example:
load config partial from <file-path>.xml from-xpath "/config/devices/entry[@name='localhost.localdomain']/network/virtual-router/entry[@name='vr1']/routing-table/ip/static-route" to-xpath "/config/devices/entry[@name='localhost.localdomain']/network/virtual-router/entry[@name='dc-vsys3']/routing-table/ip/static-route"
This will load the static routes from "vr1" to "dc-vsys3" on your Palo Alto.
Sonic Happy Hour
09-12-2024 07:47 AM
If I also have IPv6 static routes do I just duplicate the command with /routing-table/ipv6/static-route?
I'm not sure if we have any IPv6 static - hoping they enforced BGP for IPv6 - but just in case...
Thanks,
Eric
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!