Panorama > Templates > Template Variables

Describes how to add a variable definition for a template or a template stack.
You can define variables (
Panorama
Templates
) for templates and template stacks or you can edit existing variables for an individual device (
Panorama
Managed Devices
Summary
). Variables are configuration components defined on the template or template stack that provide flexibility and re-usability when you use Panorama to manage firewall configurations. You can use variables to replace:
  • An IP address (includes IP Netmask, IP Range, and FQDN) in all areas of the configuration.
  • Interfaces in an IKE Gateway configuration (Interface) and in an HA configuration (Group ID).
When you add firewalls to a template stack, they automatically inherit variables that you create for a template or template stack.
Template Variable Information
Description
Name
The name of the variable definition.
Template (device and template stack)
Displays the name of the template to which the variable definition belongs.
Type
Displays the type of variable definition:
  • IP Netmask
    —Define a static IP or network address.
  • IP Range
    —Define an IP range. For example, 192.168.1.10-192.168.1.20.
  • FQDN
    —Define a fully qualified Domain Name.
  • Group ID
    —Define the High Availability Group ID. For more information, see Configuration Guidelines for Active/Passive HA.
  • Interface
    —Define a firewall interface on the firewall. Can only be used for an IKE Gateway configuration.
Value
Displays the configured value for the variable definition.
Add (template and template stack)
Add a new template variable definition.
Delete
Delete an existing template variable definition.
Clone
Clone an existing template variable definition.
Override (template stack and device)
Overrides an existing template variable definition inherited from the template stack or device. You cannot change the variable type or name and you cannot override device-specific variables.
Revert (template stack and device)
To clear any overridden values on the template stack or device level; reverts the overridden variable to its original template variable definition.
Get values used on device only (device only)
Populate the selected variable with the value used on the firewall. Requires that a template or template stack variable be already defined and pushed to the firewall before Panorama can retrieve the value. Values fetched from the firewall will
Override
the template or template stack variable to create a device-specific variable. If no variable definition has been pushed to the firewall, Panorama will return
Value not found
for that variable.

New Template Variable Creation

How to create a new template variable for a template or template stack.
Add
a new template variable definition.
New Template Variable Definition Information
Description
Name
Name the variable definition. All variable definition names must start with the dollar sign (“$”) character.
Type
Select the type of variable definition:
IP Netmask
,
IP Range
,
FQDN
,
Group ID
, or
Interface
.
Value
Enter the desired value for the variable definition.

Edit Existing Template Variable

How to edit an existing template variable for a template or template stack.
You can edit a template variable definition for a template or template stack at any point after the variable is created (
Panorama
Templates
).
Manage
the template variables to select a variable and edit available values as needed.

Create or Edit Variable Definition on a Device

How to create device-specific variable definitions from other devices within the same template stack.
Go to
Panorama
Managed Devices
Summary
to create variable definitions or override template variables pushed from a Panorama template or template stack. Template variables include:
  • An IP address (IP Netmask, IP Range, or FQDN) in all areas of the configuration.
  • Interfaces in an IKE Gateway configuration (Interface) or an HA configuration (Group ID).
Creating a device variable allows you to copy overridden device-specific variables from a device in the same template stack instead of recreating them individually. By default, all variable definitions are inherited from the template or template stack and can be only overridden—you cannot delete or create new variable definitions for an individual device.
Create
device variable definitions by copying variable definitions from existing devices in the template stack or
Edit
existing device variable definitions.

Related Documentation