Template Stacks

A template stack is a combination of templates. By assigning firewalls to a stack, you can push all the necessary settings to them without the redundancy of adding every setting to every template. Panorama supports up to 1,024 stacks. To configure a template stack, Add Stack and configure the settings as described in the following table.
After configuring a template stack, commit your changes in Panorama (see Panorama Commit Operations). After you configure the network and device settings of firewalls assigned to the stack, you must perform a template commit to push the settings to the firewalls.
Deleting a template stack or removing a firewall from a template stack does not delete the values that Panorama previously pushed to that firewall; however, when you remove a firewall from a template stack, Panorama no longer pushes new updates to that firewall.
Template Stack Settings
Description
Name
Enter a stack name (up to 31 characters). The name is case-sensitive, must be unique, must start with a letter, and can contain only letters, numbers, and underscores.In the Device and Network tabs, the Template drop-down displays the stack name and its assigned templates.
Description
Enter a description for the stack.
Templates
Add each template you want to include in the stack (up to 16).
If templates have duplicate settings, Panorama pushes only the settings of the higher template in the list to the assigned firewalls. For example, if Template_A is above Template_B in the list, and both templates define the ethernet1/1 interface, Panorama pushes the ethernet1/1 definition from Template_A and not from Template_B. To change the order, select a template and Move Up or Move Down.
Panorama doesn’t validate template combinations in stacks so plan the order in a way that avoids invalid relationships.
Devices
Select each firewall that you want to add to the stack.
If the list of firewalls is long, you can filter it by Platforms, Device Groups, Tags, and HA Status.
You can assign firewalls that have non-matching modes (VPN mode, multiple virtual systems mode, or operational mode) to the same stack. Panorama pushes mode-specific settings only to firewalls that support those modes.
Select All
Selects every firewall in the list.
Deselect All
Deselects every firewall in the list.
Group HA Peers
Groups firewalls that are high availability (HA) peers. This enables you to easily identify firewalls that have an HA configuration. When pushing settings from the template stack, you can push to the grouped pair instead of to each firewall individually.
Filter Selected
To display only specific firewalls, select them and then Filter Selected.

Related Documentation