Settings inheritance thru Template-Stack ?

[niuk]

If I have two devices in the same Template-Stack, will member template enforce same setting on both devices including i.e. same L3 addresses ? This is what I want to avoid

[bradk14 · Accepted solution]

 if one of the templates in that stack defines L3 IP addressing for an interface, it applies to all the devices assigned to that template stack.

since the concept behind the template stack is you can combine bits and pieces of various templates to apply partial configs to selected devices, ultimately you should have a unique stack for each device, or HA pair of devices. it just gives you the benefit of being able to create partial templates (snippets) that you can re-use across multiple template stacks.

[niuk]

Yeah, makes sense. I also found excellent article about using multiple templates.  Method 3 (Use template stacks) is the way to go for myself. The comment reads 'PAN-OS 7.0.X only' but I think it author meant 7+

[bradk14]

yes, definitely applies to 7.0+ (and 8).

you may also want to seek out the free self paced training for Panorama in the Palo Alto Networks Education website. the whole thing is just 2 hours or so, but there's a section on template stacks which helps demonstrate how the policies are applied when using multiple templates.