Set Commands Introduced in PAN-OS 9.1
Table of Contents
Set Commands Introduced in PAN-OS 9.1
Command line interface 'set' commands that are new in
PAN-OS 9.1.
The following commands are new in PAN-OS 9.1:
set deviceconfig system panorama set deviceconfig system panorama local-panorama set deviceconfig system panorama local-panorama panorama-server <value> set deviceconfig system panorama local-panorama panorama-server-2 <value>
set deviceconfig setting management disable-commit-recovery <yes|no> set deviceconfig setting management commit-recovery-retry <1-5> set deviceconfig setting management commit-recovery-timeout <3-30>
set network interface ethernet <name> layer3 ip <name> sdwan-gateway <ip/netmask> set network interface ethernet <name> layer3 sdwan-link-settings set network interface ethernet <name> layer3 sdwan-link-settings enable <yes|no> set network interface ethernet <name> layer3 sdwan-link-settings sdwan-interface-profile <value>
set network interface sdwan set network interface sdwan units set network interface sdwan units <name> set network interface sdwan units <name> comment <value> set network interface sdwan units <name> cluster-name <value> set network interface sdwan units <name> interface [ <interface1> <interface2>... ]
set network ike gateway <name> comment <value> set network tunnel ipsec <name> comment <value>
set network qos profile <name> class-bandwidth-type set network qos profile <name> class-bandwidth-type mbps set network qos profile <name> class-bandwidth-type mbps class set network qos profile <name> class-bandwidth-type mbps class <name> set network qos profile <name> class-bandwidth-type mbps class <name> priority <real-time|high|medium|low> set network qos profile <name> class-bandwidth-type mbps class <name> class-bandwidth set network qos profile <name> class-bandwidth-type mbps class <name> class-bandwidth egress-max <float> set network qos profile <name> class-bandwidth-type mbps class <name> class-bandwidth egress-guaranteed <float> set network qos profile <name> class-bandwidth-type percentage set network qos profile <name> class-bandwidth-type percentage class set network qos profile <name> class-bandwidth-type percentage class <name> set network qos profile <name> class-bandwidth-type percentage class <name> priority <real-time|high|medium|low> set network qos profile <name> class-bandwidth-type percentage class <name> class-bandwidth set network qos profile <name> class-bandwidth-type percentage class <name> class-bandwidth egress-max <float> set network qos profile <name> class-bandwidth-type percentage class <name> class-bandwidth egress-guaranteed <float> set network qos interface <name> regular-traffic groups <name> members <name> match local-address destination_interface <value>
set network shared-gateway <name> rulebase sdwan set network shared-gateway <name> rulebase sdwan rules set network shared-gateway <name> rulebase sdwan rules <name> set network shared-gateway <name> rulebase sdwan rules <name> from [ <from1> <from2>... ] set network shared-gateway <name> rulebase sdwan rules <name> to [ <to1> <to2>... ] set network shared-gateway <name> rulebase sdwan rules <name> source [ <source1> <source2>... ] set network shared-gateway <name> rulebase sdwan rules <name> source-user [ <source-user1> <source-user2>... ] set network shared-gateway <name> rulebase sdwan rules <name> destination [ <destination1> <destination2>... ] set network shared-gateway <name> rulebase sdwan rules <name> application [ <application1> <application2>... ] set network shared-gateway <name> rulebase sdwan rules <name> service [ <service1> <service2>... ] set network shared-gateway <name> rulebase sdwan rules <name> tag [ <tag1> <tag2>... ] set network shared-gateway <name> rulebase sdwan rules <name> negate-source <yes|no> set network shared-gateway <name> rulebase sdwan rules <name> negate-destination <yes|no> set network shared-gateway <name> rulebase sdwan rules <name> disabled <yes|no> set network shared-gateway <name> rulebase sdwan rules <name> description <value> set network shared-gateway <name> rulebase sdwan rules <name> group-tag <value> set network shared-gateway <name> rulebase sdwan rules <name> path-quality-profile <value> set network shared-gateway <name> rulebase sdwan rules <name> action set network shared-gateway <name> rulebase sdwan rules <name> action traffic-distribution-profile <value> set network shared-gateway <name> rulebase sdwan rules <name> action app-failover-for-nat-sessions <keep-existing-link|failover-to-better-path>
set shared application-filter <name> tagging set shared application-filter <name> tagging no-tag <yes> set shared application-filter <name> tagging tag [ <tag1> <tag2>... ] set shared application-filter <name> exclude [ <exclude1> <exclude2>... ]
set shared profiles hip-objects <name> host-info criteria os contains IoT <value>
set shared profiles sdwan-path-quality set shared profiles sdwan-path-quality <name> set shared profiles sdwan-path-quality <name> metric set shared profiles sdwan-path-quality <name> metric latency set shared profiles sdwan-path-quality <name> metric latency threshold <10-3000> set shared profiles sdwan-path-quality <name> metric latency sensitivity <low|medium|high> set shared profiles sdwan-path-quality <name> metric pkt-loss set shared profiles sdwan-path-quality <name> metric pkt-loss threshold <1-100> set shared profiles sdwan-path-quality <name> metric pkt-loss sensitivity <low|medium|high> set shared profiles sdwan-path-quality <name> metric jitter set shared profiles sdwan-path-quality <name> metric jitter threshold <10-2000> set shared profiles sdwan-path-quality <name> metric jitter sensitivity <low|medium|high>
set shared profiles sdwan-traffic-distribution set shared profiles sdwan-traffic-distribution <name> set shared profiles sdwan-traffic-distribution <name> traffic-distribution <Best Available Path|Top Down Priority|Weighted Session Distribution> set shared profiles sdwan-traffic-distribution <name> link-tags set shared profiles sdwan-traffic-distribution <name> link-tags <name> set shared profiles sdwan-traffic-distribution <name> link-tags <name> weight <0-100>
set shared admin-role <name> role device webui policies sdwan-rulebase <enable|read-only|disable> set shared admin-role <name> role device webui objects dynamic-user-groups <enable|read-only|disable> set shared admin-role <name> role device webui objects sdwan set shared admin-role <name> role device webui objects sdwan sdwan-profile <enable|read-only|disable> set shared admin-role <name> role device webui objects sdwan sdwan-dist-profile <enable|read-only|disable> set shared admin-role <name> role device webui network sdwan-interface-profile <enable|read-only|disable> set shared admin-role <name> role vsys webui policies sdwan-rulebase <enable|read-only|disable> set shared admin-role <name> role vsys webui objects dynamic-user-groups <enable|read-only|disable> set shared admin-role <name> role vsys webui objects sdwan set shared admin-role <name> role vsys webui objects sdwan sdwan-profile <enable|read-only|disable> set shared admin-role <name> role vsys webui objects sdwan sdwan-dist-profile <enable|read-only|disable> set shared admin-role <name> role vsys webui network sdwan-interface-profile <enable|read-only|disable>
set vsys <name> import resource max-sdwan-rules <0-2000> set vsys <name> log-settings profiles <name> match-list <name> actions <name> type tagging target <source-address|destination-address|user>
set vsys <name> sdwan-interface-profile set vsys <name> sdwan-interface-profile <name> set vsys <name> sdwan-interface-profile <name> link-tag <value> set vsys <name> sdwan-interface-profile <name> link-type <ADSL/DSL|Cablemodem|Ethernet|Fiber|LTE/3G/4G/5G|MPLS|Microwave/Radio|Satellite|WiFi|Other> set vsys <name> sdwan-interface-profile <name> maximum-download <1-100000> set vsys <name> sdwan-interface-profile <name> maximum-upload <1-100000> set vsys <name> sdwan-interface-profile <name> path-monitoring <Aggressive|Relaxed> set vsys <name> sdwan-interface-profile <name> probe-frequency <1-5> set vsys <name> sdwan-interface-profile <name> probe-idle-time <1-86400> set vsys <name> sdwan-interface-profile <name> failback-hold-time <20-120> set vsys <name> sdwan-interface-profile <name> comment <value>
set vsys <name> profiles hip-objects <name> host-info criteria os contains IoT <value>
set vsys <name> profiles sdwan-path-quality set vsys <name> profiles sdwan-path-quality <name> set vsys <name> profiles sdwan-path-quality <name> metric latency set vsys <name> profiles sdwan-path-quality <name> metric latency sensitivity <low|medium|high> set vsys <name> profiles sdwan-path-quality <name> metric pkt-loss set vsys <name> profiles sdwan-path-quality <name> metric pkt-loss threshold <1-100> set vsys <name> profiles sdwan-path-quality <name> metric pkt-loss sensitivity <low|medium|high> set vsys <name> profiles sdwan-path-quality <name> metric jitter set vsys <name> profiles sdwan-path-quality <name> metric jitter threshold <10-2000> set vsys <name> profiles sdwan-path-quality <name> metric jitter sensitivity <low|medium|high>
set vsys <name> profiles sdwan-traffic-distribution set vsys <name> profiles sdwan-traffic-distribution <name> set vsys <name> profiles sdwan-traffic-distribution <name> traffic-distribution <Best Available Path|Top Down Priority|Weighted Session Distribution> set vsys <name> profiles sdwan-traffic-distribution <name> link-tags set vsys <name> profiles sdwan-traffic-distribution <name> link-tags <name> set vsys <name> profiles sdwan-traffic-distribution <name> link-tags <name> weight <0-100>
set vsys <name> dynamic-user-group set vsys <name> dynamic-user-group <name> set vsys <name> dynamic-user-group <name> description <value> set vsys <name> dynamic-user-group <name> filter <value> set vsys <name> dynamic-user-group <name> tag [ <tag1> <tag2>... ]
set vsys <name> application-filter <name> tagging set vsys <name> application-filter <name> tagging no-tag <yes> set vsys <name> application-filter <name> tagging tag [ <tag1> <tag2>... ] set vsys <name> application-filter <name> exclude [ <exclude1> <exclude2>... ]
set vsys <name> rulebase sdwan set vsys <name> rulebase sdwan rules set vsys <name> rulebase sdwan rules <name> set vsys <name> rulebase sdwan rules <name> from [ <from1> <from2>... ] set vsys <name> rulebase sdwan rules <name> to [ <to1> <to2>... ] set vsys <name> rulebase sdwan rules <name> source [ <source1> <source2>... ] set vsys <name> rulebase sdwan rules <name> source-user [ <source-user1> <source-user2>... ] set vsys <name> rulebase sdwan rules <name> destination [ <destination1> <destination2>... ] set vsys <name> rulebase sdwan rules <name> application [ <application1> <application2>... ] set vsys <name> rulebase sdwan rules <name> service [ <service1> <service2>... ] set vsys <name> rulebase sdwan rules <name> tag [ <tag1> <tag2>... ] set vsys <name> rulebase sdwan rules <name> negate-source <yes|no> set vsys <name> rulebase sdwan rules <name> negate-destination <yes|no> set vsys <name> rulebase sdwan rules <name> disabled <yes|no> set vsys <name> rulebase sdwan rules <name> description <value> set vsys <name> rulebase sdwan rules <name> group-tag <value> set vsys <name> rulebase sdwan rules <name> path-quality-profile <value> set vsys <name> rulebase sdwan rules <name> action set vsys <name> rulebase sdwan rules <name> action traffic-distribution-profile <value> set vsys <name> rulebase sdwan rules <name> action app-failover-for-nat-sessions <keep-existing-link|failover-to-better-path>
