Palo Alto Networks Knowledgebase: How to Load Partial Config for Application Groups

How to Load Partial Config for Application Groups

2811
Created On 07/17/19 21:11 PM - Last Updated 07/17/19 22:30 PM
Resolution

On the Palo Alto Networks device, it is possible to merge part of a config from one device to another device.

Example

Moving the application groups from device A and adding the application groups to the same section of the config in device B:

  1. Export the config from device A.
  2. Import the config from device A into device B.
  3. Log in to the CLI of device B and go into configure mode (this is simply done by typing 'configure' then press 'enter')
  4. Issue the following command to merge the application groups from device A to device B:

    load config partial from device_A_app_group_config.xml from-xpath devices/entry/vsys/entry/application-group to-xpath /config/devices/entry/vsys/entry/application-group mode merge

  5. Commit

Note: In a multi-vsys system, run the following command:

load config partial from device_A_app_group_config.xml mode merge from-xpath shared/application-group to-xpath /config/shared/application-group

This command will not work on a non multi-vsys system, like a PA-200.

owner: swhyte



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClhVCAS&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language