Skip to content

pa_execute_op_command_vpn

Go to Automation

View in GitLab

Description

Run operational (panos_op) commands across multiple VPN peer endpoints. Supports several host-selection modes (public EDL list, numeric VPN range, or specific list), filters online peers, and executes predefined or ad‑hoc command lists (cleanup, zone changes, custom commands).

Credentials

  • panos_username / panos_password

Input

Variable Description
_connecttovpn Host selection mode — Alle VPN op hun public ip, Van VPNXXX tot VPNYYY, or Specifieke public ip lists
_commandtype Command set to run — e.g. Clear sessions for Campus AP, Clear VPN ike-ipsec sessions, zone_change_setting, Run a specific command
_pacommand Comma-separated command(s) used when _commandtype == Run a specific command
_startvpn, _endvpn Numeric range bounds when using the VPNXXX..VPNYYY mode
_specificpubip Comma-separated list of specific public IPs when using Specifieke public ip lists
exclusion_list List of VPN IDs to exclude when using the public EDL method (optional)
panos_username, panos_password Credentials used for panos_op connections

Output

  • online_vpns: List of endpoints reachable on port 443.
  • result: Aggregated command execution results from panos_op or included task outputs (per VPN host and command).

Dependencies