How to Import and Export Address and Address Objects PAN OS 10.1.2

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

How to Import and Export Address and Address Objects PAN OS 10.1.2

L0 Member

Can anyone advise me on how to import multiple ip addresses in bulk into the firewall? Currently using PAN OS 10.1.2. 

 

We have acquired a new location and we have almost 400 objects, ranges, and FQDNs that will need to be imported into our environment. We are also using multiple group consisting of PA5200s, 3200s, and 220s. I would like to be able to use a .csv, notepad file, or terminal emulator to make this happen smoothly. I would also like to do an export from PAN to make sure I was putting everything in the correct format. We also run a HA environment so I would want to make sure these were added to the correct Dynamic address groups object address.  

2 REPLIES 2

Cyber Elite
Cyber Elite

do you have Panorama? this may be a good point to consider getting panorama for centralized management and easily sharing objects between devices 🙂

if you export the config off of the donor firewall and import it into the new firewall, you can "import partial" (CLI) whole swaths of the config from the exported config file into the new device

 

an alternative method is using the toggle 'set cli config-output-format set', going into config mode and running 'show' (with or without a '| match x' filter

this will output a whole bunch of ready-to-reuse set commands you can simply let loose in the new firewall to import the config

 

 

hope this helps

Tom Piens
PANgurus - (co)managed services and consultancy

Cyber Elite
Cyber Elite

@Adam-West,

I'll just add that if you can't justify Panorama, you can do the templating yourself if your just a tad handy with scripting and XML format. You can utilize a Jinja2 template just as easily yourself to ensure that your firewalls are all sharing the same objects if you script it yourself. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!