You can configure a template stack or assign templates
to a template stack. Assigning firewalls to a template stack allows you to push
all necessary settings to the firewalls instead of adding every
setting to every template individually. Panorama supports up to
1,024 stacks. You can
a new template stack and configure the settings as described in
the following table. After you configure a template stack, you must
commit your changes in Panorama (see Panorama
Commit Operations). Additionally, after you configure the
network and device settings of firewalls assigned to the stack,
you must perform a template commit and push the settings to the
Deleting a template stack or removing
a firewall from a template stack does not delete the values that
Panorama previously pushed to that firewall; however, when you remove
a firewall from a template stack, Panorama no longer pushes new
updates to that firewall.
Template Stack Settings
Enter a stack name (up to 31 characters).
The name is case-sensitive, must be unique, must start with a letter,
and can contain only letters, numbers, and underscores. In the
drop-down displays the stack
name and its assigned templates.
Enter a description for the stack.
you want to include in the stack (up to 8).
If templates have
duplicate settings, Panorama pushes only the settings from the template that
is higher in the list when pushing settings to the assigned firewalls.
For example, if Template_A is above Template_B in the list and both
templates define the ethernet1/1 interface, then Panorama pushes
the ethernet1/1 definition from Template_A and not from Template_B.
To change the order of templates in the list, select a template and
Panorama doesn’t validate template combinations
in stacks so plan the order of your
templates to avoid invalid relationships.
Select each firewall that you want to add
to the stack.
If the list of firewalls is long, you can filter the
You can assign
firewalls that have non-matching modes (VPN mode, multiple virtual
systems mode, or operational mode) to the same stack. Panorama pushes
mode-specific settings only to those firewalls that support those
Selects every firewall in the list.
Deselects every firewall in the list.
Group HA Peers
Groups firewalls that are high availability
(HA) peers. This enables you to easily identify firewalls that have
an HA configuration. When pushing settings from the template stack,
you can push to the grouped pair instead of to each firewall individually.
To display only specific firewalls, select
them and then