Skip to content

Network Configuration Objects

Table of Contents

  1. Overview
  2. Available Network Objects
  3. Common Features
  4. Usage Example

Overview

This section covers the configuration of network features provided by the Palo Alto Networks Strata Cloud Manager SDK. Each configuration object corresponds to a resource in the Strata Cloud Manager and provides methods for CRUD (Create, Read, Update, Delete) operations.

Available Network Objects

Network Interfaces

VPN Configuration

Other Network Objects

  • DHCP Interfaces - Configure DHCP server and relay on firewall interfaces
  • DNS Proxies - Configure DNS proxy services with domain-specific rules and caching
  • Interface Management Profiles - Configure management service access on interfaces
  • NAT Rules - Configure Network Address Translation rules for traffic handling
  • PBF Rules - Configure Policy-Based Forwarding rules for traffic routing overrides
  • QoS Profiles - Configure Quality of Service profiles for bandwidth management
  • QoS Rules - Configure QoS policy rules for traffic classification and prioritization
  • Security Zones - Configure Security Zones for network segmentation
  • Zone Protection Profiles - Configure zone-level protection against floods, scans, and packet-based attacks

Routing Configuration

  • Logical Router - Configure logical routers with VRF, BGP, OSPF, ECMP, and static routes

Routing Profiles

Common Features

All network configuration objects provide standard operations:

  • Create new network configurations
  • Read existing network objects
  • Update network properties
  • Delete network objects
  • List and filter network objects with pagination support

The network objects also enforce:

  • Container validation (folder/device/snippet)
  • Data validation with detailed error messages
  • Consistent API patterns across all network object types

Usage Example

from scm.client import ScmClient

# Initialize client
client = ScmClient(
   client_id="your_client_id",
   client_secret="your_client_secret",
   tsg_id="your_tsg_id"
)

# Create a NAT rule
client.nat_rule.create({
   "name": "outbound-nat",
   "nat_type": "ipv4",
   "source": ["10.0.0.0/24"],
   "destination": ["any"],
   "service": "any",
   "source_translation": {
      "dynamic_ip_and_port": {
         "type": "dynamic_ip_and_port",
         "translated_address": ["192.168.1.100"]
      }
   },
   "folder": "NAT Rules"
})

# List NAT rules
nat_rules = client.nat_rule.list(folder="NAT Rules")

# Print the results
for rule in nat_rules:
   print(f"NAT Rule: {rule.name}, Type: {rule.nat_type}")

Select an object from the list above to view detailed documentation, including methods, parameters, and examples.