PCNSE · Question #503
A firewall has been assigned to a new template stack that contains both "Global" and "Local" templates in Panorama, and a successful commit and push has been performed. While validating the…
The correct answer is C. Move the "Local" template above the "Global" template in the template stack. In a Panorama template stack, templates are applied in top-down order of priority: a template higher in the stack takes precedence over templates below it for any overlapping settings. Since the 'Global' template settings are overriding the 'Local' template settings, 'Global'…
Question
A firewall has been assigned to a new template stack that contains both "Global" and "Local" templates in Panorama, and a successful commit and push has been performed. While validating the configuration on the local firewall, the engineer discovers that some settings are not being applied as intended. The setting values from the "Global" template are applied to the firewall instead of the "Local" template that has different values for the same settings. What should be done to ensure that the settings in the "Local" template are applied while maintaining settings from both templates?
Options
- AMove the "Global" template above the "Local" template in the template stack.
- BPerform a commit and push with the "Force Template Values" option selected.
- CMove the "Local" template above the "Global" template in the template stack.
- DOverride the values on the local firewall and apply the correct settings for each value.
How the community answered
(29 responses)- A3% (1)
- B7% (2)
- C76% (22)
- D14% (4)
Explanation
In a Panorama template stack, templates are applied in top-down order of priority: a template higher in the stack takes precedence over templates below it for any overlapping settings. Since the 'Global' template settings are overriding the 'Local' template settings, 'Global' must currently be positioned above 'Local' in the stack. To give 'Local' template settings higher priority while still inheriting non-conflicting settings from 'Global', the 'Local' template must be moved above the 'Global' template in the stack order. Moving 'Global' higher (option A) would worsen the problem. 'Force Template Values' (option B) overrides local firewall edits but does not change template priority within the stack. Overriding on the local firewall (option D) works but breaks the centralized management model and is not the recommended approach.
Topics
Community Discussion
No community discussion yet for this question.