panos_set – Execute arbitrary commands on a PAN-OS device using XPath and element

New in version 2.7.

DEPRECATED

Removed in Ansible:  version: 2.12 Why:Consolidating code base. Alternative:Use https://galaxy.ansible.com/PaloAltoNetworks/paloaltonetworks instead.

Synopsis

• Run an arbitrary ‘xapi’ command taking an XPath (i.e get) or XPath and element (i.e set).
• See https://github.com/kevinsteves/pan-python/blob/master/doc/pan.xapi.rst for details
• Runs a ‘set’ command by default
• This should support _all_ commands that your PAN-OS device accepts vi it’s cli
• cli commands are found as
• Once logged in issue ‘debug cli on’
• Enter configuration mode by issuing ‘configure’
• Enter your set (or other) command, for example ‘set deviceconfig system timezone Australia/Melbourne’
• returns
• “<request cmd=”set” obj=”/config/devices/entry[@name=’localhost.localdomain’]/deviceconfig/system” cookie=XXXX><timezone>Australia/Melbourne</timezone></request>
• The ‘xpath’ is “/config/devices/entry[@name=’localhost.localdomain’]/deviceconfig/system”
• The ‘element’ is “<timezone>Australia/Melbourne</timezone>”

Requirements

The below requirements are needed on the host that executes this module.

• pan-python

Parameters

Parameter	Choices/Defaults	Comments
command -	Choices: set ← edit delete get show override	Xapi method name which supports 'xpath' or 'xpath' and 'element'
element -		The 'element' for the 'xpath' if required
ip_address string / required		IP address or host FQDN of the target PAN-OS NVA
password string / required		Password for the given 'username'
username string	Default: "admin"	User name for a user with admin rights on the PAN-OS NVA
xpath - / required		The 'xpath' for the commands configurable

Examples

- name: Set timezone on PA NVA
  panos_set:
    ip_address: "192.168.1.1"
    username: "my-random-admin"
    password: "admin1234"
    xpath: "/config/devices/entry/deviceconfig/system"
    element: "<timezone>Australia/Melbourne</timezone>"

- name: Commit configuration
  panos_commit:
    ip_address: "192.168.1.1"
    username: "my-random-admin"
    password: "admin1234"

Status

• This module will be removed in version 2.12. [deprecated]
• For more information see DEPRECATED.

Authors

• Jasper Mackenzie (@spmp)

Hint

If you notice any issues in this documentation, you can edit this document to improve it.