About dwmaas

Hi All. I am in a postion that we would like to migrate our current cconfiguration of multiple trunk 10g links supporting a vlan with subinterfaces and vsys's to virtual wire mode on the existing chassis, (i.e. 7050, or 5060).  As I understand it, we would need at least 2 interfaces for each trunk for both sides of the vwire, and then have matching subinterfaces under these vwire interfaces for each individual vlan. Since we would like to migrate vlan by vlan, is there a way that this is possible? For instance: current configuration 7050: 4-10g interfaces trunked for a single vrf, with multiple subinterface for indiviudal vlans and associated vsys's that support client servers etc(can think is as a client dmx) and another 4-10g interface trunk for the internal network side. The vsys have a interfaces one on the client vlan and one on the internal vlan.   Since I am knew to virtual wire, but not Palo in general, what would be the best course of proceeding to migrate individual vsys/vlans to a vwire configuration.  I assume we would need at least 2 10g interfaces 1 for client vlan, and 1 for internal to start with, and as we move we can add additional 10g interfaces to both sides to increase the available bandwidth needed?  Any help would be appreciated. I have read most of the KB articales but they all seem to be directed to a single 1 to 1 interface.  Also what if we have a vsys that had internet were we do not wish to vwire internet but the other would be client side and internal, I expect that we could not have vwire in this scenario based on what I have researched. Thank you in advance for any help. ... View more

Hi We are new to Ansible, and would like to automate the create of new vsys on a chassis. Currently we do this manually with a spreadsheet derived from information provided by our network team. Are there any playbooks available that can be put together to automate the tasks in order to create a new vsys? Create new virtual system - assign to interfaces Create new virtual router - assign to vs and interfaces Create new interfaces - and assign to vr Create new zones - assign to interface Add BGP information to vr   any help would be appreciated with steps do perform this action.   Thank you ... View more

Hi, How can we determine the configuraiton file size on Palo Alto PA devices. We wish to determine were our configuraiton size is compared to the recommened size for each PA type 5K 7k etc. Thank you ... View more

We are wanting to be able to make the creation of vsys's and vrouters more cookie cutter and eventually automate them. Has anyone does this, and if so how have you done so. With pythons scripts and API or with Ansible? Been also trying to do with set commands and variables. Any input would be helpful Thank you ... View more

Does anyone have a script or a way to implement a new virtural firewall and virtual router via the cli? Does not have to be automatic but would like to get to that point? I have a couple dozen to implement and looking for a quicker way vs via gui. Thank you David ... View more

We would like to automate the configuration of a new vsys, uisng inputs from a file or script with the required information, using either the set commands or the API. Has anyone attempted to do this, and what is the best way and how to gather the require commands etc for this. Any suggestions would be helpful.   Thanks you David ... View more