Configuration Reusability for Templates and Template Stacks

Enhanced template and template stack reusability using variables to reduce total template count while maintaining any unique configurations.
Templates and template stacks are improved to make it easier to manage firewalls and appliances from Panorama™ using a single template or template stack. To more easily reuse templates and template stacks, you can now create template variables in place of firewall-specific and appliance-specific IP literals in your configurations. You can define template variables at either the template level or the template stack level and you can use them to replace IP addresses, IP ranges, FQDNs, group IDs, and interfaces in IKE, VPN and HA configurations. You can override variables associated with and managed by the template or template stack on a per-firewall or appliance basis. Overriding a template or template stack variable allows you to minimize the number of templates and template stacks you need to manage while still allowing you to keep any device-specific configurations as needed. To reduce the number template and template stack configurations you need to manage, you now add firewalls and appliances to a template stack rather than to a template; the firewall or appliance prioritizes the template stack configuration. Additionally, template stacks can now reference any named object in a template that belongs to the template stack, which means you use template stacks to manage the base firewall and appliance configurations while template configurations enable you to create specific configurations. For more information, see Configure a Template or Template Stack Variables and Manage Templates and Template Stacks.
template-variable-example.png
To create a template variable:
  1. Create a template and template stack using a variable name for an object. Variable names must start with the dollar sign ( “$” ) symbol. For example, you could use
    $Panorama
    as a variable for the Panorama IP address that you want to configure on multiple managed firewalls and appliances.
  2. In
    Panorama
    Templates
    , click
    Manage
    (Variables column).
  3. Add
    a new variable.
    Variables can also be created inline where variables are supported.
  4. Commit and Push
    the configuration changes to the managed firewalls and appliances.
  5. Verify that the variables were pushed to the managed firewalls and appliances. Values defined by a variable display a variable symbol ( icon_template_variable.png ) and you can hover over the symbol to view the template or template stack to which the variable definition belongs. A variable that is overridden displays an overridden variable symbol ( icon_overridden_template_variable.png ).
    confirm-variable-use.png

Related Documentation