Network Security

In my previous Ansible-related posts, both playbooks showed that the user would have to provide variable names and their respective values using the -e or -extra-vars command option. While that works, the user would have to memorize the variable names. If the playbook requires calling multiple roles with variable names, then memorizing all those variable names can be a nightmare. To make it easier for the users, we can leverage vars_prompt. Today, we are exploring how to accept user input in …

[Read more...] about Ansible: Accepting user input variables

In my previous post, I shared a tutorial on writing an Ansible playbook to check for available and unavailable VSYS names on a Palo Alto Networks firewall. Today, we'll explore an Ansible playbook designed to verify the availability of user-defined IP address with prefix length on a Palo Alto Networks firewall. The Ansible playbook The playbook checks if the user-inputted IP address with prefix length is valid and within the range of RFC 1918. Moreover, it checks if the IP address …

[Read more...] about Palo Alto Ansible Network Automation: Automating IP address validation

My Ansible network automation journey began two years ago, but it's been an off-and-on process due to changing priorities at work. Initially, I created a proof-of-concept Ansible playbook to configure a site-to-site VPN on a Cisco router using a network configuration template. In this blog post, I will share my experience of converting a Palo Alto network configuration template into an Ansible playbook. Managing expectations Although I am not an expert in Ansible or network automation, I …

[Read more...] about Palo Alto Ansible Network Automation: Automating VSYS name management