Use Of Template Variables In IPv4 Setting
14865
Created On 01/06/20 10:09 AM - Last Modified 01/07/20 09:14 AM
Objective
Template Variables allow you to assign a dynamic value in a template configuration you can overwrite later in a template stack.
This can be particularly useful for IPv4 addresses you do not know value when configuring a template.
The IPv4 template variable can be referenced in different parts of the template configuration like in Global Protect configuration.
Procedure
When you are using IPv4 template variable for Gateway and/or Portal in Global Protect Configuration, you have to be sure this variable is also used to configure IP setting of the physical interface.
You have to verify this in Template configuration but also in Template stack configuration.
Template stack can contain more than one template, setting IPv4 configuration with conflicting values; the First template applied will prevail.
Additional Information
If template variable is not used in Global protect configuration and in Interface configuration, you will have the following validation error when committing the configuration on Panorama:
devices -> localhost.localdomain -> template-stack -> [Stack Name] -> config -> devices -> localhost.localdomain -> network -> tunnel -> global-protect-gateway -> [Gateway Name] -> local-address -> ip -> ipv4 is invalid