Export

cancel
Showing results for 
Search instead for 
Did you mean: 

Export

L2 Linker

Hello, is there any posibility how to export list of computers from Objects - Address Groups. I have there one group of computers FQDN specification and I would like to export it.

Thanks for advice

Brano

3 REPLIES 3

L6 Presenter

I guess this should be possible with the XML API.

L3 Networker

Not sure exactly what you are trying to do, but using PAN-perl and PAN-ksteves both posted in DevCenter you can do stuff like this to export address and address-group objects.  And you can customize or write new templates if you want.

$ panxapi -t pa-200 -gxr /config/devices/entry/vsys/entry/address |

>  ./panconf.py --config - --json |

>  ./panjsont.py --json - --jt ../jsont/address-cli.jsont

get: success

set address net5501 ip-netmask 172.29.9.109/32

set address net5501 description "ssh gateway"

set address ns5gt ip-netmask 172.29.9.126/32

set address ns5gt description "exterior firewall"

set address ibase3 ip-netmask 172.29.9.101/32

set address foo fqdn bar

set address foo2 ip-range 10.1.1.1-10.1.1.5

set address "foo bar" fqdn google.com

# No address-group entries

$ panxapi -t pa-200 -gxr /config/devices/entry/vsys/entry/address-group |

>  ./panconf.py --config - --json |

>  ./panjsont.py --json - --jt ../jsont/address-cli.jsont

get: success

# No address entries

set address-group bastion-hosts [ ibase3 net5501 ]

set address-group foo3 [ foo2 ns5gt ]

Not applicable

Hi Brano,

You can also export these using the following process:

1. SSH to the firewall and run the command set cli config-output-format set

2. Enter the command configure to enter configuration mode and run the command show address-group <address-group object name>

This will display the section of the configuration relating to that address group, you can copy it out from there and do what you like with it.  It will display in set commands, so if you wanted to create that address-group on other PAN firewalls, you could just paste the group of set commands into the CLI and it will be created (you will have to create the address objects first though, to export those from the config as well, run show address <address object name>).

Mike

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!