Palo Alto Networks Knowledgebase: How to Import and Export Address and Address Objects

How to Import and Export Address and Address Objects

34469
Created On 08/05/19 19:22 PM - Last Updated 08/05/19 19:48 PM
Device Management Initial Configuration Installation QoS Zone and DoS Protection
Resolution

Details

This document describes how to import and export address and address objects from one firewall to another without having to redefine them manually. This document can be used in scenarios where multiple Palo Alto Networks firewalls at different sites want to leverage an existing address/ address-group configuration.

Steps

  1. Verify from the existing firewall, that Address and Address-objects exists:


  2. From the CLI, set the configuration output format to 'set' and extract address and address/group information:
    > set cli config-output-format set
    > configure
    Entering configuration mode
    [edit]
    # show address
    set address google fqdn google.com
    set address google description "FQDN address object for google.com"set address mgmt-L3 ip-netmask 10.66.18.0/23
    set address mgmt-L3 description "IP Netmask address object for mgmt-L3"
    set address trust-L3 ip-netmask 10.66.20.0/23
    set address untrust-L3 ip-netmask 10.66.24.0/23
    set address dmz-L3 ip-netmask 10.66.22.0/23
    [edit]
    # show address-group
    set address-group Inside static [ dmz-L3 mgmt-L3 trust-L3 ]
    set address-group Outside static [ google untrust-L3 ]
    [edit]

  3. Copy all the 'set' commands from the above output to a Notepad file, and edit as desired for other firewalls. For address-groups, make sure that the entire set command is copied/pasted including the '[ ]' part
  4. Login into the CLI of other firewalls, move the CLI config-output-format to 'set' and paste the commands into the configuration mode:
    > set cli config-output-format set
    > configure
    # <paste all the set commands here>
    # commit

owner: kadak



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClHNCA0&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language