panos_nat_policy – create a policy NAT rule — Ansible Documentation

- AnsibleFest
- Products
- Community
- Webinars & Training
- Blog

Documentation

# panos_nat_policy – create a policy NAT rule

New in version 2.3.

- DEPRECATED
- Synopsis
- Requirements
- Parameters
- Examples
- Status

## DEPRECATED

Removed in Ansible:
| version: 2.9
Why: | This module depended on outdated and old SDK, use panos_nat_rule instead.
Alternative: | Use panos_nat_rule instead.

## Synopsis

- Create a policy nat rule. Keep in mind that we can either end up configuring source NAT, destination NAT, or both. Instead of splitting it into two we will make a fair attempt to determine which one the user wants.

## Requirements

The below requirements are needed on the host that executes this module.

- pan-python

## Parameters

Parameter | Choices/Defaults | Comments
--- | --- | ---
commit boolean | Choices: no yes ← | commit if changed
destination - | Default: ["any"] | list of destination addresses
dnat_address - |  | dnat translated address
dnat_port - |  | dnat translated port
from_zone - / required |  | list of source zones
ip_address - / required |  | IP address (or hostname) of PAN-OS device
override boolean | Choices: no ← yes | attempt to override rule if one with the same name already exists
password - / required |  | password for authentication
rule_name - / required |  | name of the SNAT rule
service - | Default: "any" | service
snat_address - |  | snat translated address
snat_bidirectional boolean | Choices: no ← yes | bidirectional flag
snat_interface - |  | snat interface
snat_interface_address - |  | snat interface address
snat_type - |  | type of source translation
source - | Default: ["any"] | list of source addresses
to_zone - / required |  | destination zone
username - | Default: "admin" | username for authentication

## Examples

    # Create a source and destination nat rule
      - name: create nat SSH221 rule for 10.0.1.101
        panos_nat:
          ip_address: "192.168.1.1"
          password: "admin"
          rule_name: "Web SSH"
          from_zone: ["external"]
          to_zone: "external"
          source: ["any"]
          destination: ["10.0.0.100"]
          service: "service-tcp-221"
          snat_type: "dynamic-ip-and-port"
          snat_interface: "ethernet1/2"
          dnat_address: "10.0.1.101"
          dnat_port: "22"
          commit: False

## Status

- This module will be removed in version 2.9. [deprecated]
- For more information see DEPRECATED.

### Authors

- Luigi Mori (@jtschichold), Ivan Bojer (@ivanbojer)

Hint

If you notice any issues in this documentation you can edit this document to improve it.