Frustration with Panorama

[Alex_Samad]

Hi

So I am trying to use templates with panorama.  I have 3 devices. and I have a based template - standrard message and other things.

One of thos things is Authentication profiles, I have a standrad one that points to some LDAP servers.

But I am trying to attach my GP portal to it. but it it defined in my device template.

So i create a dummy auth profile with the same name as the one that is going into the standad shared template.

But I go to apply it and it say the auth profile in has none for type ... I don't want to have to keep retyping out all the configs cause they can't be shared ....

[jsalmans]

This sounds like something similar to what was running in to when experimenting with shared templates.  I abandoned it for now because it seemed too easy for someone to mess up and it behaved really odd when it was necessary to reference something from a template further down in the stack.

If the template system is going to allow stacking (i.e. the final templates are constructed from multiple templates smooshed together) then it needs a better understanding of the inheritance.  If I designate a template that is a base template but then need a device specific template on top of that, the device specific template needs to know and understand that it stacks on another template already and load those values in, perhaps in a different font color or something to indicate that they're inherited.  This way, the user can see what values are inheriting and, more importantly, you can fully configure the template instead of having to redefine values already set because the real settings you're trying to change have a dependancy on them and won't except empty ones.