You can configure a template stack or assign templates to a template stack. Assigning firewalls to a template stack allows you to push all necessary settings to the firewalls instead of adding every setting to every template individually. Panorama supports up to 1,024 stacks. You can Add Stack to create a new template stack and configure the settings as described in the following table. After you configure a template stack, you must commit your changes in Panorama (see Panorama Commit Operations). Additionally, after you configure the network and device settings of firewalls assigned to the stack, you must perform a template commit and push the settings to the firewalls.
Deleting a template stack or removing a firewall from a template stack does not delete the values that Panorama previously pushed to that firewall; however, when you remove a firewall from a template stack, Panorama no longer pushes new updates to that firewall.
Template Stack Settings
Enter a stack name (up to 31 characters). The name is case-sensitive, must be unique, must start with a letter, and can contain only letters, numbers, and underscores. In the Device and Network tabs, the Template drop-down displays the stack name and its assigned templates.
Enter a description for the stack.
Add each template you want to include in the stack (up to 8).
If templates have duplicate settings, Panorama pushes only the settings from the template that is higher in the list when pushing settings to the assigned firewalls. For example, if Template_A is above Template_B in the list and both templates define the ethernet1/1 interface, then Panorama pushes the ethernet1/1 definition from Template_A and not from Template_B. To change the order of templates in the list, select a template and Move Up or Move Down.
Select each firewall that you want to add to the stack.
If the list of firewalls is long, you can filter the list by Platforms, Device Groups, Tags, and HA Status.
You can assign firewalls that have non-matching modes (VPN mode, multiple virtual systems mode, or operational mode) to the same stack. Panorama pushes mode-specific settings only to those firewalls that support those modes.
Selects every firewall in the list.
Deselects every firewall in the list.
Group HA Peers
Groups firewalls that are high availability (HA) peers. This enables you to easily identify firewalls that have an HA configuration. When pushing settings from the template stack, you can push to the grouped pair instead of to each firewall individually.
To display only specific firewalls, select them and then Filter Selected.
Configure a Template Stack
Configure a Template Stack A template stack is configurable and allows you to combine multiple templates to push full configurations to your managed firewalls. While ...
Templates and Template Stacks
Overview of template and template stack configuration functionality. ...
Add a Template
Add a Template You must add at least one template before Panorama™ displays the Device and Network tabs required to define the network setup and ...
Panorama > Templates
Panorama > Templates Through the Device and Network tabs, you can deploy a common base configuration to multiple firewalls that require similar settings using a ...
Configure a Template or Template Stack Variable
How to create a variable in a template or template stack and push it to firewalls and appliances. ...
Panorama > Templates > Template Variables
Describes how to add a variable definition for a template or a template stack. ...
Plan Your Multi-NSX Deployment
Plan Your Multi-NSX Deployment You must carefully plan your device group hierarchy and template stacks and consider how they interact with the other components needed ...
Manage Templates and Template Stacks
Manage Templates and Template Stacks Use templates and template stacks to define the common base configurations that enable firewalls to operate in your network. See ...
Override a Template Setting
Override a template setting on the firewall by manually overriding the values on the firewall or by using variables. ...