Re: [rancid] Palo Alto (Panorama) configuration

Just validated the ‘show config merged’ command works with any PA firewall, managed by Panorama or not.


Chris Gauthier Senior Network Engineer | Comscore
t +1 (503) 331-2704 | 
[email protected]
comscore.com
​​​This e-mail (including any attachments) may contain information that is private, confidential, or protected by attorney-client or other privilege. If you received this e-mail in error, please delete it from your system and notify sender.
From: Rancid-discuss <[email protected]> on behalf of "Gauthier, Chris" <[email protected]>
Date: Thursday, July 11, 2019 at 11:16 AM
To: john heasley <[email protected]>, "Anderson, Charles R" <[email protected]>
Cc: "[email protected]" <[email protected]>
Subject: Re: [rancid] Palo Alto (Panorama) configuration

Yes, the command "show config merged" gives the locally-managed config output AND the configuration that is pushed out by Panorama. I'll make a custom device type and see how this works in my environment. If it works, I'll post the results here. I will also test with a non-Panorama-managed system.

--Chris
Chris​
Gauthier
 Senior Network Engineer
 |
Comscore
t +1 (503) 331-2704<tel:(503)%20331-2704>
 |
[email protected]<mailto:[email protected]>
comscore.com<http://www.comscore.com/>
​​​This e-mail (including any attachments) may contain information that is private, confidential, or protected by attorney-client or other privilege. If you received this e-mail in error, please delete it from your system and notify sender.
-----Original Message-----
From: Rancid-discuss <[email protected]> on behalf of john heasley <[email protected]>
Date: Thursday, July 11, 2019 at 8:17 AM
To: "Anderson, Charles R" <[email protected]>
Cc: "[email protected]" <[email protected]>
Subject: Re: [rancid] Palo Alto (Panorama) configuration

Thu, Jul 11, 2019 at 02:37:51PM +0000, Anderson, Charles R:
> You can use "show config merged" to see the local device's config merged with the templates from Panorama.

Does this work with "non-managed" (better term?) configs? And, was this
command introduced recently?

_______________________________________________
Rancid-discuss mailing list
[email protected]
https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fwww.shrubbery.net%2fmailman%2flistinfo%2francid-discuss&c=E,1,ZBO_SpPdPN9F0GTa50thF3JK2iNVO_jcwwSZwho1q8BVBoP9LydezSjLupULi9-PCcBbEWhWi1x-kRvg-KGqTG6CANfUm1cA6XPL5VPANHGtvC7Gc3N4Pg4SarAO&typo=1

_______________________________________________
Rancid-discuss mailing list
[email protected]
http://www.shrubbery.net/mailman/listinfo/rancid-discuss