New in version 2.4.
The below requirements are needed on the host that executes this module.
| Parameter | Choices/Defaults | Comments |
|---|---|---|
| api_key |
API key that can be used instead of username/password credentials.
|
|
| commit |
|
Commit configuration if changed.
|
| destination_ip |
Default: [u'any']
|
list of destination addresses
|
|
destination_zone
required |
destination zone
|
|
| dnat_address |
dnat translated address
|
|
| dnat_port |
dnat translated port
|
|
|
ip_address
required |
IP address (or hostname) of PAN-OS device being configured.
|
|
| operation |
The action to be taken. Supported values are add/update/find/delete.
|
|
|
password
required |
Password credentials to use for auth unless api_key is set.
|
|
|
rule_name
required |
name of the SNAT rule
|
|
| service |
Default: any
|
service
|
| snat_address_type |
Default: translated-address
|
type of source translation. Supported values are translated-address/translated-address.
|
| snat_bidirectional |
|
bidirectional flag
|
| snat_dynamic_address |
Source NAT translated address. Used with Dynamic-IP and Dynamic-IP-and-Port.
|
|
| snat_interface |
snat interface
|
|
| snat_interface_address |
snat interface address
|
|
| snat_static_address |
Source NAT translated address. Used with Static-IP translation.
|
|
| snat_type |
type of source translation
|
|
| source_ip |
Default: [u'any']
|
list of source addresses
|
|
source_zone
required |
list of source zones
|
|
| username |
Default: admin
|
Username credentials to use for auth unless api_key is set.
|
# Create a source and destination nat rule
- name: Create NAT SSH rule for 10.0.1.101
panos_nat_rule:
ip_address: '{{ ip_address }}'
username: '{{ username }}'
password: '{{ password }}'
rule_name: "Web SSH"
source_zone: ["external"]
destination_zone: "external"
source: ["any"]
destination: ["10.0.0.100"]
service: "service-tcp-221"
snat_type: "dynamic-ip-and-port"
snat_interface: "ethernet1/2"
dnat_address: "10.0.1.101"
dnat_port: "22"
This module is flagged as preview which means that it is not guaranteed to have a backwards compatible interface.
Hint
If you notice any issues in this documentation you can edit this document to improve it.