- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
I'm hoping someone can help out. I've just finished a merge from an ASA to Palo Alto through Expedition. The ASA had 3000+ addresses as part of an existing address group. I've tried multiple times to merge, and push the changes through the API, but it would appear all the addresses don't show up in the group.
I guess what I'm asking, is how can I bulk move already created addresses to an existing group? I've seen the set command for exporting and importing, but I'm not sure how to specify a group AND I'm not sure how to do it through the CLI in Panorama, since I have to specify the device group for the specific firewall. Otherwise, I'll be here for several days just adding the addresses individually.
Any help would be greatly appreciated.
Thank you in advance,
you can use Panorama CLI to configure existing address objects to be member of a specific address group in a Device Group:
SSH to Panorama and issue:
set cli config-output-format set
set cli scripting-mode on
set device-group <Name of Device Group> address-group <Name of Address Group> static [ <Address object 1> <Address object 2> <Address object 3> ]
set cli scripting-mode off
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!