Primary IP & Management Interface detection on PAN-OS not working

[mnooseman]

As discussed with Leonardo in Slack

Netbox Version: 4.6.1
Diode Plugin Version: 1.12.0
Diode Version: 2.0.0 (installed 2 days ago using quickstart.sh which pulls "latest" from Docker Hub)
Orb Agent Version: 2.9.0
device_discovery Version: 1.27.0

When discovering a Palo Alto PAN-OS device by IP address, Orb/Diode don't seem to be able to detect that the IP used for discovery is assigned to the management interface on the device. The IP itself isn't detected at all either, though all others appear to be (as best I can tell).

In agent.yaml, hostname is set to the Management IP of my firewall.

[leoparente]

hi @mnooseman a doubt. in Netbox you can see the management interface being created and it has a IP address that matches exactly the hostname in

policies:
  device_discovery:
    policy_1:
      config:
         defaults:
           site: NY
      scope:
        - hostname: <IP> // <--- matches
          username: admin
          password: admin

[mnooseman]

Hi Leo,

Management interface is created in NetBox, The management IP is not created or assigned in NetBox. The IP is assigned in PAN-OS correctly to the management interface, and it matches exactly the - hostname: <IP> entry from agent.yaml as you've asked above.

[leoparente]

So none of your Discovered Interfaces has IP address like this sample?

also are you using paloalto_panos or paloalto_panos_ssh driver?

[leoparente]

Also, what help us to know if it is a issue on agent side or maybe in diode is to run agent in dry_run mode

https://github.com/netboxlabs/orb-agent/blob/develop/docs/config_samples.md#diode-dry-run-mode

It will generate a json file that would be the entities ingested in Diode, therefore NetBox. Scan the result json and check if the IP address exists there