Ansible repository with playbooks to manage azure objects
Vous ne pouvez pas sélectionner plus de 25 sujets Les noms de sujets doivent commencer par une lettre ou un nombre, peuvent contenir des tirets ('-') et peuvent comporter jusqu'à 35 caractères.
 
 
 

92 lignes
7.9 KiB

  1. set cli config-output-format set
  2. set cli scripting-mode on
  3. configure
  4. set network interface ethernet ethernet1/1 layer3 ndp-proxy enabled no
  5. set network interface ethernet ethernet1/1 layer3 ip 10.163.2.20/24
  6. set network interface ethernet ethernet1/1 layer3 lldp enable no
  7. set network interface ethernet ethernet1/1 layer3 interface-management-profile NP_IM_INTERNAL
  8. set network interface ethernet ethernet1/1 comment "internal network"
  9. set network interface ethernet ethernet1/2 layer3 ndp-proxy enabled no
  10. set network interface ethernet ethernet1/2 layer3 lldp enable no
  11. set network interface ethernet ethernet1/2 layer3 interface-management-profile NP_IM_EXTERNAL
  12. set network interface ethernet ethernet1/2 layer3 ip 10.163.3.20/24
  13. set network interface ethernet ethernet1/2 comment "external network"
  14. set network profiles monitor-profile default interval 3
  15. set network profiles monitor-profile default threshold 5
  16. set network profiles monitor-profile default action wait-recover
  17. set network profiles interface-management-profile NP_IM_INTERNAL http no
  18. set network profiles interface-management-profile NP_IM_INTERNAL https yes
  19. set network profiles interface-management-profile NP_IM_INTERNAL ssh yes
  20. set network profiles interface-management-profile NP_IM_INTERNAL ping yes
  21. set network profiles interface-management-profile NP_IM_INTERNAL telnet no
  22. set network profiles interface-management-profile NP_IM_EXTERNAL http no
  23. set network profiles interface-management-profile NP_IM_EXTERNAL https no
  24. set network profiles interface-management-profile NP_IM_EXTERNAL ssh yes
  25. set network profiles interface-management-profile NP_IM_EXTERNAL ping yes
  26. set network profiles interface-management-profile NP_IM_EXTERNAL telnet no
  27. set network virtual-router VR_EXTERNAL ecmp algorithm ip-modulo
  28. set network virtual-router VR_EXTERNAL protocol bgp enable no
  29. set network virtual-router VR_EXTERNAL protocol bgp routing-options graceful-restart enable yes
  30. set network virtual-router VR_EXTERNAL protocol rip enable no
  31. set network virtual-router VR_EXTERNAL protocol ospf enable no
  32. set network virtual-router VR_EXTERNAL protocol ospfv3 enable no
  33. set network virtual-router VR_EXTERNAL interface ethernet1/2
  34. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_DEFAULT destination 0.0.0.0/0
  35. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_DEFAULT interface ethernet1/2
  36. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_DEFAULT nexthop ip-address 10.163.3.1
  37. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_172.16.0.0_12 destination 172.16.0.0/12
  38. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_172.16.0.0_12 interface ethernet1/2
  39. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_172.16.0.0_12 nexthop next-vr VR_INTERNAL
  40. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_192.168.0.0_16 destination 192.168.0.0/16
  41. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_192.168.0.0_16 interface ethernet1/2
  42. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_192.168.0.0_16 nexthop next-vr VR_INTERNAL
  43. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_10.0.0.0_8 destination 10.0.0.0/8
  44. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_10.0.0.0_8 interface ethernet1/2
  45. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_10.0.0.0_8 nexthop next-vr VR_INTERNAL
  46. set network virtual-router VR_INTERNAL ecmp algorithm ip-modulo
  47. set network virtual-router VR_INTERNAL protocol bgp enable no
  48. set network virtual-router VR_INTERNAL protocol bgp routing-options graceful-restart enable yes
  49. set network virtual-router VR_INTERNAL protocol rip enable no
  50. set network virtual-router VR_INTERNAL protocol ospf enable no
  51. set network virtual-router VR_INTERNAL protocol ospfv3 enable no
  52. set network virtual-router VR_INTERNAL interface ethernet1/1
  53. set network virtual-router VR_INTERNAL routing-table ip static-route SR_DEFAULT destination 0.0.0.0/0
  54. set network virtual-router VR_INTERNAL routing-table ip static-route SR_DEFAULT interface ethernet1/1
  55. set network virtual-router VR_INTERNAL routing-table ip static-route SR_DEFAULT nexthop ip-address 10.163.2.1
  56. set deviceconfig system type dhcp-client send-hostname yes
  57. set deviceconfig system type dhcp-client send-client-id no
  58. set deviceconfig system type dhcp-client accept-dhcp-hostname no
  59. set deviceconfig system type dhcp-client accept-dhcp-domain no
  60. set deviceconfig system update-server updates.paloaltonetworks.com
  61. set deviceconfig system update-schedule threats recurring weekly day-of-week wednesday
  62. set deviceconfig system update-schedule threats recurring weekly at 01:02
  63. set deviceconfig system update-schedule threats recurring weekly action download-only
  64. set deviceconfig system timezone Canada/Eastern
  65. set deviceconfig system service disable-telnet yes
  66. set deviceconfig system service disable-http yes
  67. set deviceconfig system hostname fwazrcchp02
  68. set deviceconfig system domain gazmet.com
  69. set deviceconfig system ntp-servers primary-ntp-server ntp-server-address timedmz1.gazmet.com
  70. set deviceconfig system ntp-servers primary-ntp-server authentication-type none
  71. set deviceconfig system ntp-servers secondary-ntp-server ntp-server-address timedmz2.gazmet.com
  72. set deviceconfig system ntp-servers secondary-ntp-server authentication-type none
  73. set deviceconfig system dns-setting servers primary 10.68.1.74
  74. set deviceconfig system dns-setting servers secondary 10.16.50.19
  75. set deviceconfig setting config rematch yes
  76. set deviceconfig system panorama local-panorama panorama-server avmtl-panorama-p001.gazmet.com
  77. set deviceconfig setting management hostname-type-in-syslog FQDN
  78. set deviceconfig setting management initcfg type dhcp-client send-hostname yes
  79. set deviceconfig setting management initcfg type dhcp-client send-client-id no
  80. set deviceconfig setting management initcfg type dhcp-client accept-dhcp-hostname no
  81. set deviceconfig setting management initcfg type dhcp-client accept-dhcp-domain no
  82. set deviceconfig setting management initcfg hostname fwazrcchp02
  83. set deviceconfig setting management initcfg username master
  84. set deviceconfig setting management initcfg public-key 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
  85. set mgt-config users master phash $1$hddqkagq$lajwKchF6MOvCbv589RqP.
  86. set mgt-config users master public-key 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
  87. set mgt-config users master permissions role-based superuser yes
  88. set mgt-config password-complexity enabled yes
  89. set mgt-config password-complexity minimum-length 8
  90. exit
  91. set cli scripting-mode off