paloaltonetworks / paloaltonetworks.panos / 2.19.1 / module / panos_bgp_conditional_advertisement Manage a BGP conditional advertisement. | "added in version" 1.0.0 of paloaltonetworks.panos" Authors: Joshua Colson (@freakinhippie), Garfield Lee Freeman (@shinmog)paloaltonetworks.panos.panos_bgp_conditional_advertisement (2.19.1) — module
Install with ansible-galaxy collection install paloaltonetworks.panos:==2.19.1
collections: - name: paloaltonetworks.panos version: 2.19.1
Use BGP to publish and consume routes from disparate networks.
In the PAN-OS GUI, this resource cannot be created without also creating at least one non-exist filter and one advertise filter. The API behaves a little differently; you can create the conditional advertisement itself, but the API will start throwing errors if you try to update it and there is not at least one non-exist filter and one advertise filter.
In order for a conditional advertisement to be valid, you must specify at least one non-exist and one advertise filter.
When modifying a BGP conditional advertisement, any filters attached are left as-is, unless I(advertise_filter) or I(non_exist_filter) are specified.
- name: Create BGP Conditional Advertisement Rule paloaltonetworks.panos.panos_bgp_conditional_advertisement: provider: '{{ provider }}' name: 'cond-rule-01' enable: true non_exist_filter: '{{ non_exist.panos_obj }}' advertise_filter: '{{ advertise.panos_obj }}'
name: description: - Name of Conditional Advertisement policy. required: true type: str port: default: 443 description: - B(Deprecated) - Use I(provider) to specify PAN-OS connectivity instead. - HORIZONTALLINE - The port number to connect to the PAN-OS device on. type: int state: choices: - present - absent default: present description: - The state. type: str commit: description: - B(Deprecated) - Please use M(paloaltonetworks.panos.panos_commit_firewall), M(paloaltonetworks.panos.panos_commit_panorama), M(paloaltonetworks.panos.panos_commit_push) instead. - HORIZONTALLINE - Commit changes after creating object. If I(ip_address) is a Panorama device, and I(device_group) or I(template) are also set, perform a commit to Panorama and a commit-all to the device group/template. type: bool enable: description: - Enable this policy. type: bool api_key: description: - B(Deprecated) - Use I(provider) to specify PAN-OS connectivity instead. - HORIZONTALLINE - The API key to use instead of generating it using I(username) / I(password). type: str used_by: description: - List of Peer Groups using this policy. elements: str type: list vr_name: default: default description: - Name of the virtual router; it must already exist and have BGP configured. - See M(paloaltonetworks.panos.panos_virtual_router). type: str password: description: - B(Deprecated) - Use I(provider) to specify PAN-OS connectivity instead. - HORIZONTALLINE - The password to use for authentication. This is ignored if I(api_key) is specified. type: str provider: description: - A dict object containing connection details. suboptions: api_key: description: - The API key to use instead of generating it using I(username) / I(password). type: str ip_address: description: - The IP address or hostname of the PAN-OS device being configured. type: str password: description: - The password to use for authentication. This is ignored if I(api_key) is specified. type: str port: default: 443 description: - The port number to connect to the PAN-OS device on. type: int serial_number: description: - The serial number of a firewall to use for targeted commands. If I(ip_address) is not a Panorama PAN-OS device, then this param is ignored. type: str username: default: admin description: - The username to use for authentication. This is ignored if I(api_key) is specified. type: str type: dict version_added: 1.0.0 version_added_collection: paloaltonetworks.panos template: description: - (Panorama only) The template this operation should target. Mutually exclusive with I(template_stack). type: str username: default: admin description: - B(Deprecated) - Use I(provider) to specify PAN-OS connectivity instead. - HORIZONTALLINE - The username to use for authentication. This is ignored if I(api_key) is specified. type: str ip_address: description: - B(Deprecated) - Use I(provider) to specify PAN-OS connectivity instead. - HORIZONTALLINE - The IP address or hostname of the PAN-OS device being configured. type: str template_stack: description: - (Panorama only) The template stack this operation should target. Mutually exclusive with I(template). type: str advertise_filter: description: - B(Deprecated) - Use M(paloaltonetworks.panos.panos_bgp_policy_filter) to define filters after creation. - HORIZONTALLINE - Advertisement filter object returned by M(paloaltonetworks.panos.panos_bgp_policy_filter). type: str non_exist_filter: description: - B(Deprecated) - Use M(paloaltonetworks.panos.panos_bgp_policy_filter) to define filters after creation. - HORIZONTALLINE - Non-Exist filter object returned by M(paloaltonetworks.panos.panos_bgp_policy_filter). type: str