Bulk add existing addresses to an existing group

[clwilson]

Hello,

I'm hoping someone can help out.  I've just finished a merge from an ASA to Palo Alto through Expedition.  The ASA had 3000+ addresses as part of an existing address group.  I've tried multiple times to merge, and push the changes through the API, but it would appear all the addresses don't show up in the group.

I guess what I'm asking, is how can I bulk move already created addresses to an existing group?  I've seen the set command for exporting and importing, but I'm not sure how to specify a group AND I'm not sure how to do it through the CLI in Panorama, since I have to specify the device group for the specific firewall.  Otherwise, I'll be here for several days just adding the addresses individually.

Any help would be greatly appreciated. 

Thank you in advance,

[PavelK]

Hello @clwilson

you can use Panorama CLI to configure existing address objects to be member of a specific address group in a Device Group:

SSH to Panorama and issue:

set cli config-output-format set

set cli scripting-mode on

configure

set device-group <Name of Device Group> address-group <Name of Address Group> static [ <Address object 1> <Address object 2> <Address object 3> ]

set cli scripting-mode off

Kind Regards

Pavel