Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

Does anyone know the API XPATH to load partial for static routes?

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Does anyone know the API XPATH to load partial for static routes?

L2 Linker

Hello All!

 

I'm trying to use Expedition to migrate 100+ virtual systems from old Juniper firewalls my team inherited to our Palo Altos.  We are using Load Partial commands rather than importing the entire Expedition output based on recommendations from Palo Engineers.  Some of my Juniper stuff has large routing tables of static routes, so I want to bring those in from the Expedition .XML file.  I see the static routes in the XML, so I know I am close...

 

Does anyone know what my XPATH or complete load partial command would look like for a virtual router "vr1"?  In other words, I am trying to do a load partial command that loads static routes defined on the old firewall in "vr1" to a new firewall where the vsys is called "dc-vsys3" and the new virtual routing table is called "dc-vsys3" as well.

2 accepted solutions

Accepted Solutions

L4 Transporter

You will test with the following command

"load config partial from "file.xml" from-xpath /config/devices/entry[@name='localhost.localdomain']/network/virtual-router to-xpath /config/devices/entry[@name='localhost.localdomain']/network/virtual-router mode merge"

PCSPI, PCNSCx3,PCNSEx4,, PCSAE,PCDRA, ISC2 CC

View solution in original post

L0 Member

To load static routes, use the load config partial command with the appropriate XPaths. For example:

 

load config partial from <file-path>.xml from-xpath "/config/devices/entry[@name='localhost.localdomain']/network/virtual-router/entry[@name='vr1']/routing-table/ip/static-route" to-xpath "/config/devices/entry[@name='localhost.localdomain']/network/virtual-router/entry[@name='dc-vsys3']/routing-table/ip/static-route"

 

This will load the static routes from "vr1" to "dc-vsys3" on your Palo Alto. 
Sonic Happy Hour 

View solution in original post

6 REPLIES 6

L4 Transporter

You will test with the following command

"load config partial from "file.xml" from-xpath /config/devices/entry[@name='localhost.localdomain']/network/virtual-router to-xpath /config/devices/entry[@name='localhost.localdomain']/network/virtual-router mode merge"

PCSPI, PCNSCx3,PCNSEx4,, PCSAE,PCDRA, ISC2 CC

Thanks!

Looks like unless the interfaces are named the same it won't meet my needs.  I may try editing the source XML file.

L0 Member

To load static routes, use the load config partial command with the appropriate XPaths. For example:

 

load config partial from <file-path>.xml from-xpath "/config/devices/entry[@name='localhost.localdomain']/network/virtual-router/entry[@name='vr1']/routing-table/ip/static-route" to-xpath "/config/devices/entry[@name='localhost.localdomain']/network/virtual-router/entry[@name='dc-vsys3']/routing-table/ip/static-route"

 

This will load the static routes from "vr1" to "dc-vsys3" on your Palo Alto. 
Sonic Happy Hour 

If I also have IPv6 static routes do I just duplicate the command with /routing-table/ipv6/static-route?

 

I'm not sure if we have any IPv6 static - hoping they enforced BGP for IPv6 - but just in case...

 

Thanks,

Eric

 

Thanks!

  • 2 accepted solutions
  • 1162 Views
  • 6 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!