panos_sag - Create a static address group.
New in version 2.4.
Synopsis
- Create a static address group object in the firewall used for policy rules.
Requirements (on host that executes module)
- pan-python can be obtained from PyPi https://pypi.python.org/pypi/pan-python
- pandevice can be obtained from PyPi https://pypi.python.org/pypi/pandevice
- xmltodict can be obtained from PyPi https://pypi.python.org/pypi/xmltodict
Options
parameter | required | default | choices | comments |
---|---|---|---|---|
api_key | no | API key that can be used instead of username/password credentials. | ||
commit | no | True | commit if changed | |
description | no | The purpose / objective of the static Address Group | ||
devicegroup | no | None | - The name of the Panorama device group. The group must exist on Panorama. If device group is not defined it is assumed that we are contacting a firewall. | |
ip_address | yes | IP address (or hostname) of PAN-OS device | ||
operation | yes | The operation to perform Supported values are add/list/delete. | ||
password | yes | password for authentication | ||
sag_name | yes | name of the dynamic address group | ||
static_match_filter | yes | Static filter user by the address group | ||
tags | no | Tags to be associated with the address group | ||
username | no | admin | username for authentication |
Examples
- name: sag panos_sag: ip_address: "192.168.1.1" password: "admin" sag_name: "sag-1" static_value: ['test-addresses', ] description: "A description for the static address group" tags: ["tags to be associated with the group", ]
Status
This module is flagged as preview which means that it is not guaranteed to have a backwards compatible interface.
For help in developing on modules, should you be so inclined, please read Community Information & Contributing, Testing Ansible and Developing Modules.
© 2012–2018 Michael DeHaan
© 2018–2019 Red Hat, Inc.
Licensed under the GNU General Public License version 3.
https://docs.ansible.com/ansible/2.4/panos_sag_module.html