PaloAltoNetworks / ansible-pan

Ansible modules for Palo Alto Networks NGFWs

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Panos_ha doesn't have Priority and Timer Settings

AdilKhan1117 opened this issue · comments

Is your feature request related to a problem?

panos_ha does not have the basic and minimum requirements for ensuring which device is primary and secondary and HA timer setting for fine-tuning settings.

Describe the solution you'd like

  • Allow to enable device priority

  • Allow to customize 'HA Timer Settings'
    - Promotion Hold Time (ms)
    - Hello Interval (ms)
    - Heartbeat Interval (ms)
    - Flap Max
    - Preemption Hold Time (min)
    - Monitor Fail Hold Up Time (ms)
    - Additional Master Hold Up Time (ms)

Describe alternatives you've considered

  • Had to Import 'XML' and use Panos_import, Panos_op, to call the ha xml.
  • This is not idempotent.

Additional context

Simple HA configuration of the Palo Alto Firewalls Enable Device Priority and HA Timer settings.

🎉 Thanks for opening your first issue here! Welcome to the community!

Also found another issue whilst implementing this panos_ha,

This is on a Virtual Palo Alto Appliance:

msg": "Failed create: deviceconfig -> high-availability -> interface -> ha1-backup unexpected here\n deviceconfig -> high-availability -> interface is invalid"