Why is "set address BLAH tag BLAH not working?!

[Stevenjwilliams83]

admin@PA-5250-LOANER# show address TULLY
set address TULLY ip-netmask 192.168.15.245
set address TULLY tag Safenet_Listener_Service
[edit]
admin@PA-5250-LOANER# set address POPLICOLA tag Portal_Services

Server error : tag 'Portal_Services' is not a valid reference
[edit]
admin@PA-5250-LOANER#

Is there a syntax issue here that I am not seeing?

[OtakarKlier]

Hello,

Do you have Portal_Services defined anywhere?

Regards,

[hshawn]

Seems like you are doing it right as long as the tag exists (I am not sure you can dynamically create the tags like you can in the GUI)

Recently I added a few hundred objects by using the following (copy and paste into CLI)

set shared address 190.210.176.182 tag "BLOCKED IP" ip-netmask 190.210.176.182
set shared address 190.210.186.3 tag "BLOCKED IP" ip-netmask 190.210.186.3
set shared address 27.121.67.103 tag "BLOCKED IP" ip-netmask 27.121.67.103
set shared address 54.153.155.14 tag "BLOCKED IP" ip-netmask 54.153.155.14
set shared address 101.0.76.6 tag "BLOCKED IP" ip-netmask 101.0.76.6

This was on a Panorama (hence the "shared")

Here are other examples (no tag):

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClHNCA0

If you do it without the tag does it work?

Are you in configure mode? I am assuming you are

disclaimer: The above IPs were identified as hosting EMOTET and are not secret sauce

[Stevenjwilliams83]

It does work without the tag, but why cant I bulk import tags? seems silly.