About RobertNunez

I will rather prefer a module that can help executing the following: "cmd": "set device-group MYCLOUD address-group MYCLOUD-GRP-1 static SMTP-10.10.20.30", or "cmd": "delete device-group MYCLOUD address-group MYCLOUD-GRP-1 static SMTP-<IP Address>" This will look easy to understand and cleaner than a playbook that get it all (our production config have twenty+ groups with an average of 2K IP addresses each), remove it and re-add it.   Do you have a way or module to execute this? Thanks, Roberto ... View more

Hi Bob, I did install and reinstall PANOS galaxy many times before; however the error still happening. Here is my playbook:   --- - name: Adding IP address to an address group connection: local hosts: sfopanorama gather_facts: yes vars: description: 'Task_Number_1234567' firewall_host: '10.10.10.10' server_address: '10.10.1.3' address_group: 'MYTTP-GW-2' dev_group: 'MLG' address_mask: 'ip-netmask'   roles: - role: PaloAltoNetworks.paloaltonetworks   tasks: - name: Add IP Address to Address Group {{ dev_group }} panos_op: ip_address: '{{ firewall_host }}' username: '{{ pan_username }}' password: '{{ pan_password }}' cmd: 'configure' cmd: 'set device-group {{ dev_group }} address-group {{ address_group }} static SMTP-{{ server_address }}' register: result_output2   I tried with and without the "configure" option, and changing the way the "set device-group" options; However, none of them works. This is the only solution that can solve the "Panos_address_group" problem that I mentioned earlier. If only I can make it work. Thanks, Roberto ... View more

Thanks Bob. I understand the issue; however, reading all the members of a giving address group and adding IPs all again just to add an IP address or more or eliminate it will not be an easy task and could cause many other issues. Especially when you have to delete an IP address across three or four address groups, and the need to recreate all groups again if/when the IP address is found in all groups. Would you confirm if Panos_address_group (update or delete options) will not be available at all either via this module or any new Panos module? Thanks, Roberto ... View more

I've forgot to mention that "Panos_address_group" module deleted all existing host records when using an existing group name. Is this the way that should work? This become a big issue when you have more than 1K hosts associated to a group and all of the sudden all get removed.   Thanks, Robert ... View more