Ansible repository with playbooks to manage azure objects
Du kan inte välja fler än 25 ämnen Ämnen måste starta med en bokstav eller siffra, kan innehålla bindestreck ('-') och vara max 35 tecken långa.
 
 
 

92 rader
7.9 KiB

  1. set cli config-output-format set
  2. set cli scripting-mode on
  3. configure
  4. set network interface ethernet ethernet1/1 layer3 ndp-proxy enabled no
  5. set network interface ethernet ethernet1/1 layer3 ip 10.163.2.20/24
  6. set network interface ethernet ethernet1/1 layer3 lldp enable no
  7. set network interface ethernet ethernet1/1 layer3 interface-management-profile NP_IM_INTERNAL
  8. set network interface ethernet ethernet1/1 comment "internal network"
  9. set network interface ethernet ethernet1/2 layer3 ndp-proxy enabled no
  10. set network interface ethernet ethernet1/2 layer3 lldp enable no
  11. set network interface ethernet ethernet1/2 layer3 interface-management-profile NP_IM_EXTERNAL
  12. set network interface ethernet ethernet1/2 layer3 ip 10.163.3.20/24
  13. set network interface ethernet ethernet1/2 comment "external network"
  14. set network profiles monitor-profile default interval 3
  15. set network profiles monitor-profile default threshold 5
  16. set network profiles monitor-profile default action wait-recover
  17. set network profiles interface-management-profile NP_IM_INTERNAL http no
  18. set network profiles interface-management-profile NP_IM_INTERNAL https yes
  19. set network profiles interface-management-profile NP_IM_INTERNAL ssh yes
  20. set network profiles interface-management-profile NP_IM_INTERNAL ping yes
  21. set network profiles interface-management-profile NP_IM_INTERNAL telnet no
  22. set network profiles interface-management-profile NP_IM_EXTERNAL http no
  23. set network profiles interface-management-profile NP_IM_EXTERNAL https no
  24. set network profiles interface-management-profile NP_IM_EXTERNAL ssh yes
  25. set network profiles interface-management-profile NP_IM_EXTERNAL ping yes
  26. set network profiles interface-management-profile NP_IM_EXTERNAL telnet no
  27. set network virtual-router VR_EXTERNAL ecmp algorithm ip-modulo
  28. set network virtual-router VR_EXTERNAL protocol bgp enable no
  29. set network virtual-router VR_EXTERNAL protocol bgp routing-options graceful-restart enable yes
  30. set network virtual-router VR_EXTERNAL protocol rip enable no
  31. set network virtual-router VR_EXTERNAL protocol ospf enable no
  32. set network virtual-router VR_EXTERNAL protocol ospfv3 enable no
  33. set network virtual-router VR_EXTERNAL interface ethernet1/2
  34. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_DEFAULT destination 0.0.0.0/0
  35. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_DEFAULT interface ethernet1/2
  36. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_DEFAULT nexthop ip-address 10.163.3.1
  37. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_172.16.0.0_12 destination 172.16.0.0/12
  38. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_172.16.0.0_12 interface ethernet1/2
  39. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_172.16.0.0_12 nexthop next-vr VR_INTERNAL
  40. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_192.168.0.0_16 destination 192.168.0.0/16
  41. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_192.168.0.0_16 interface ethernet1/2
  42. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_192.168.0.0_16 nexthop next-vr VR_INTERNAL
  43. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_10.0.0.0_8 destination 10.0.0.0/8
  44. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_10.0.0.0_8 interface ethernet1/2
  45. set network virtual-router VR_EXTERNAL routing-table ip static-route SR_10.0.0.0_8 nexthop next-vr VR_INTERNAL
  46. set network virtual-router VR_INTERNAL ecmp algorithm ip-modulo
  47. set network virtual-router VR_INTERNAL protocol bgp enable no
  48. set network virtual-router VR_INTERNAL protocol bgp routing-options graceful-restart enable yes
  49. set network virtual-router VR_INTERNAL protocol rip enable no
  50. set network virtual-router VR_INTERNAL protocol ospf enable no
  51. set network virtual-router VR_INTERNAL protocol ospfv3 enable no
  52. set network virtual-router VR_INTERNAL interface ethernet1/1
  53. set network virtual-router VR_INTERNAL routing-table ip static-route SR_DEFAULT destination 0.0.0.0/0
  54. set network virtual-router VR_INTERNAL routing-table ip static-route SR_DEFAULT interface ethernet1/1
  55. set network virtual-router VR_INTERNAL routing-table ip static-route SR_DEFAULT nexthop ip-address 10.163.2.1
  56. set deviceconfig system type dhcp-client send-hostname yes
  57. set deviceconfig system type dhcp-client send-client-id no
  58. set deviceconfig system type dhcp-client accept-dhcp-hostname no
  59. set deviceconfig system type dhcp-client accept-dhcp-domain no
  60. set deviceconfig system update-server updates.paloaltonetworks.com
  61. set deviceconfig system update-schedule threats recurring weekly day-of-week wednesday
  62. set deviceconfig system update-schedule threats recurring weekly at 01:02
  63. set deviceconfig system update-schedule threats recurring weekly action download-only
  64. set deviceconfig system timezone Canada/Eastern
  65. set deviceconfig system service disable-telnet yes
  66. set deviceconfig system service disable-http yes
  67. set deviceconfig system hostname fwazrcchp02
  68. set deviceconfig system domain gazmet.com
  69. set deviceconfig system ntp-servers primary-ntp-server ntp-server-address timedmz1.gazmet.com
  70. set deviceconfig system ntp-servers primary-ntp-server authentication-type none
  71. set deviceconfig system ntp-servers secondary-ntp-server ntp-server-address timedmz2.gazmet.com
  72. set deviceconfig system ntp-servers secondary-ntp-server authentication-type none
  73. set deviceconfig system dns-setting servers primary 10.68.1.74
  74. set deviceconfig system dns-setting servers secondary 10.16.50.19
  75. set deviceconfig setting config rematch yes
  76. set deviceconfig system panorama local-panorama panorama-server avmtl-panorama-p001.gazmet.com
  77. set deviceconfig setting management hostname-type-in-syslog FQDN
  78. set deviceconfig setting management initcfg type dhcp-client send-hostname yes
  79. set deviceconfig setting management initcfg type dhcp-client send-client-id no
  80. set deviceconfig setting management initcfg type dhcp-client accept-dhcp-hostname no
  81. set deviceconfig setting management initcfg type dhcp-client accept-dhcp-domain no
  82. set deviceconfig setting management initcfg hostname fwazrcchp02
  83. set deviceconfig setting management initcfg username master
  84. set deviceconfig setting management initcfg public-key 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
  85. set mgt-config users master phash $1$hddqkagq$lajwKchF6MOvCbv589RqP.
  86. set mgt-config users master public-key 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
  87. set mgt-config users master permissions role-based superuser yes
  88. set mgt-config password-complexity enabled yes
  89. set mgt-config password-complexity minimum-length 8
  90. exit
  91. set cli scripting-mode off