paloaltonetworks.panos.panos_dag_tags module – Manage tags for DAG’s on PAN-OS devices.

Note

This module is part of the paloaltonetworks.panos collection (version 2.13.2).

To install it, use: ansible-galaxy collection install paloaltonetworks.panos. You need further requirements to be able to use this module, see Requirements for details.

To use it in a playbook, specify: paloaltonetworks.panos.panos_dag_tags.

New in paloaltonetworks.panos 1.0.0

DEPRECATED

Removed in:

version 3.0.0

Why:

Using new modern API calls in the panos_registered_ip

Alternative:

Use paloaltonetworks.panos.panos_registered_ip instead.

Synopsis

  • Manage the ip address to tag associations. Tags will in turn be used to create DAG’s

Requirements

The below requirements are needed on the host that executes this module.

Parameters

Parameter

Comments

api_key

string

API key that can be used instead of username/password credentials.

commit

boolean

description

string

The purpose / objective of the static Address Group

devicegroup

string

  • Device groups are used for the Panorama interaction with Firewall(s). The group must exists on Panorama. If device group is not define we assume that we are contacting Firewall.

ip_address

string / required

IP address (or hostname) of PAN-OS device

ip_to_register

string

IP that will be registered with the given tag names.

operation

string / required

password

string / required

password for authentication

tag_names

list / elements=string / required

The list of the tags that will be added or removed from the IP address.

username

string

username for authentication

Default: :ansible-option-default:`"admin"`

Notes

Note

  • Checkmode is not supported.

  • Panorama is not supported.

  • use panos_registered_ip from now on

Examples

- name: Create the tags to map IP addresses
  panos_dag_tags:
    ip_address: "{{ ip_address }}"
    password: "{{ password }}"
    ip_to_register: "{{ ip_to_register }}"
    tag_names: "{{ tag_names }}"
    description: "Tags to allow certain IP's to access various SaaS Applications"
    operation: 'add'
  tags: "adddagip"

- name: List the IP address to tag mapping
  panos_dag_tags:
    ip_address: "{{ ip_address }}"
    password: "{{ password }}"
    tag_names: "{{ tag_names }}"
    description: "List the IP address to tag mapping"
    operation: 'list'
  tags: "listdagip"

- name: Unregister an IP address from a tag mapping
  panos_dag_tags:
    ip_address: "{{ ip_address }}"
    password: "{{ password }}"
    ip_to_register: "{{ ip_to_register }}"
    tag_names: "{{ tag_names }}"
    description: "Unregister IP address from tag mappings"
    operation: 'delete'
  tags: "deletedagip"

Status

  • This module will be removed in version 3.0.0. [deprecated]

  • For more information see DEPRECATED.

Authors

  • Vinay Venkataraghavan (@vinayvenkat)