Add a Template

You must add at least one template before Panorama™ displays the
Device
and
Network
tabs required to define the network setup and device configuration elements for firewalls. Panorama supports up to 1,024 templates. Every managed firewall must belong to a template stack. While templates contain managed device configurations, template stacks allow you to manage and push the template configurations to all managed firewalls assigned to the template stack.
Combine templates in to a template stack to avoid duplicating many configurations among templates (see Templates and Template Stacks and Configure a Template Stack).
  1. Add a template.
    1. Select
      Panorama
      Templates
      .
    2. Click
      Add
      and enter a unique
      Name
      to identify the template.
    3. (
      Optional
      ) Enter a
      Description
      for the template.
    4. Click
      OK
      to save the template.
    5. If the template has a virtual system (vsys) with configurations (for example, interfaces) that you want Panorama to push to firewalls that don’t have virtual systems, select the template you created, select the vsys from the
      Default VSYS
      drop-down and click
      OK
      .
    6. Select
      Commit
      Commit and Push
      and then
      Commit and Push
      your changes to the Panorama configuration and to the template.
  2. Verify that the template is available.
    After you add the first template, Panorama displays the
    Device
    and
    Network
    tabs. These tabs display a
    Template
    drop-down. Check that the drop-down displays the template you just added.
  3. Configure a Template Stack and add the template to the template stack.
  4. Use the template to push a configuration change to firewalls.
    Renaming a vsys is allowed only on the local firewall, not on Panorama the result is an entirely new vsys or the new vsys name gets mapped to the wrong vsys on the firewall.
    For example, define a primary Domain Name System (DNS) server for the firewalls in the template.
    You can also Configure a Template or Template Stack Variable to push device-specific values to managed devices.
    1. In the
      Device
      tab, select the
      Template
      from the drop-down.
    2. Select
      Device
      Setup
      Services
      Global
      , and edit the Services section.
    3. Enter an IP address for the
      Primary DNS Server
      .
      add-template-value-panorama-example.png
    4. Select
      Commit
      Commit and Push
      and then
      Commit and Push
      your changes to the Panorama configuration and to the template.
  5. Verify that the firewall is configured with the template settings that you pushed from Panorama.
    1. In the
      Context
      drop-down, select one of the firewalls to which you pushed the template setting.
    2. Select
      Device
      Setup
      Services
      Global
      . The IP address that you pushed from the template appears. The Services section header displays a template icon ( icon_template_variable.png ) to indicate that settings in the section have values pushed from a template.
      add-template-value-firewall-example.png

Related Documentation