panos_nat_policy – create a policy NAT rule
panos_nat_policy – create a policy NAT rule
New in version 2.3.
DEPRECATED
Removed in Ansible: | |
---|---|
version: 2.9 | |
Why: | This module depended on outdated and old SDK, use panos_nat_rule instead. |
Alternative: | Use panos_nat_rule instead. |
Synopsis
- Create a policy nat rule. Keep in mind that we can either end up configuring source NAT, destination NAT, or both. Instead of splitting it into two we will make a fair attempt to determine which one the user wants.
Requirements
The below requirements are needed on the host that executes this module.
- pan-python
Parameters
Parameter | Choices/Defaults | Comments |
---|---|---|
commit boolean |
|
commit if changed |
destination - |
Default: ["any"] |
list of destination addresses |
dnat_address - |
dnat translated address | |
dnat_port - |
dnat translated port | |
from_zone - / required |
list of source zones | |
ip_address - / required |
IP address (or hostname) of PAN-OS device | |
override boolean |
|
attempt to override rule if one with the same name already exists |
password - / required |
password for authentication | |
rule_name - / required |
name of the SNAT rule | |
service - |
Default: "any" |
service |
snat_address - |
snat translated address | |
snat_bidirectional boolean |
|
bidirectional flag |
snat_interface - |
snat interface | |
snat_interface_address - |
snat interface address | |
snat_type - |
type of source translation | |
source - |
Default: ["any"] |
list of source addresses |
to_zone - / required |
destination zone | |
username - |
Default: "admin" |
username for authentication |
Examples
# Create a source and destination nat rule
- name: create nat SSH221 rule for 10.0.1.101
panos_nat:
ip_address: "192.168.1.1"
password: "admin"
rule_name: "Web SSH"
from_zone: ["external"]
to_zone: "external"
source: ["any"]
destination: ["10.0.0.100"]
service: "service-tcp-221"
snat_type: "dynamic-ip-and-port"
snat_interface: "ethernet1/2"
dnat_address: "10.0.1.101"
dnat_port: "22"
commit: False
Status
- This module will be removed in version 2.9. [deprecated]
- For more information see DEPRECATED.
Authors
- Luigi Mori (@jtschichold), Ivan Bojer (@ivanbojer)
© 2012–2018 Michael DeHaan
© 2018–2019 Red Hat, Inc.
Licensed under the GNU General Public License version 3.
https://docs.ansible.com/ansible/2.8/modules/panos_nat_policy_module.html