On this page
panos_sag - Create a static address group.
New in version 2.4.
Synopsis
- Create a static address group object in the firewall used for policy rules.
Requirements (on host that executes module)
- pan-python can be obtained from PyPi https://pypi.python.org/pypi/pan-python
- pandevice can be obtained from PyPi https://pypi.python.org/pypi/pandevice
- xmltodict can be obtained from PyPi https://pypi.python.org/pypi/xmltodict
Options
parameter | required | default | choices | comments |
---|---|---|---|---|
api_key |
no |
API key that can be used instead of username/password credentials.
|
||
commit |
no | True |
commit if changed
|
|
description |
no |
The purpose / objective of the static Address Group
|
||
devicegroup |
no | None |
- The name of the Panorama device group. The group must exist on Panorama. If device group is not defined it is assumed that we are contacting a firewall.
|
|
ip_address |
yes |
IP address (or hostname) of PAN-OS device
|
||
operation |
yes |
The operation to perform Supported values are add/list/delete.
|
||
password |
yes |
password for authentication
|
||
sag_name |
yes |
name of the dynamic address group
|
||
static_match_filter |
yes |
Static filter user by the address group
|
||
tags |
no |
Tags to be associated with the address group
|
||
username |
no | admin |
username for authentication
|
Examples
- name: sag
panos_sag:
ip_address: "192.168.1.1"
password: "admin"
sag_name: "sag-1"
static_value: ['test-addresses', ]
description: "A description for the static address group"
tags: ["tags to be associated with the group", ]
Status
This module is flagged as preview which means that it is not guaranteed to have a backwards compatible interface.
For help in developing on modules, should you be so inclined, please read Community Information & Contributing, Testing Ansible and Developing Modules.
© 2012–2018 Michael DeHaan
© 2018–2019 Red Hat, Inc.
Licensed under the GNU General Public License version 3.
https://docs.ansible.com/ansible/2.4/panos_sag_module.html