You can configure a template stack or assign templates to a template stack. Assigning firewalls to a template stack allows you to push all necessary settings to the firewalls instead of adding every setting to every template individually. Panorama supports up to 1,024 stacks. You can
Add Stackto create a new template stack and configure the settings as described in the following table. After you configure a template stack, you must commit your changes in Panorama (see Panorama Commit Operations). Additionally, after you configure the network and device settings of firewalls assigned to the stack, you must perform a template commit and push the settings to the firewalls.
Deleting a template stack or removing a firewall from a template stack does not delete the values that Panorama previously pushed to that firewall; however, when you remove a firewall from a template stack, Panorama no longer pushes new updates to that firewall.
Template Stack Settings
Enter a stack name (up to 31 characters). The name is case-sensitive, must be unique, must start with a letter, and can contain only letters, numbers, and underscores. In the
Templatedrop-down displays the stack name and its assigned templates.
Enter a description for the stack.
Addeach template you want to include in the stack (up to 8).
If templates have duplicate settings, Panorama pushes only the settings from the template that is higher in the list when pushing settings to the assigned firewalls. For example, if Template_A is above Template_B in the list and both templates define the ethernet1/1 interface, then Panorama pushes the ethernet1/1 definition from Template_A and not from Template_B. To change the order of templates in the list, select a template and
Select each firewall that you want to add to the stack.
If the list of firewalls is long, you can filter the list by
You can assign firewalls that have non-matching modes (VPN mode, multiple virtual systems mode, or operational mode) to the same stack. Panorama pushes mode-specific settings only to those firewalls that support those modes.
Selects every firewall in the list.
Deselects every firewall in the list.
Group HA Peers
Groups firewalls that are high availability (HA) peers. This enables you to easily identify firewalls that have an HA configuration. When pushing settings from the template stack, you can push to the grouped pair instead of to each firewall individually.
To display only specific firewalls, select them and then