Focus
Focus
Table of Contents

Interfaces

Getting started with Interfaces using PAN-OS OpenConfig plugin.

General Behavior

Review the deviation file before using the openconfig-interfaces model to familiarize yourself with supported paths.
You can use the standard OpenConfig model to interact with PAN-OS components in the same way you would other systems, by using standard syntax to edit interfaces
When using the interfaces model with PAN-OS, considert the following behavior patterns:
  • To set the IPv4 address of the main interface instead of a subinterface, use 0 as the index of the subinterface. If the interface doesn't exist, the interface will be created.
  • Loopback interfaces only support non-zero subinterface indexes.
  • Interfaces will be added to default_l3 or default_l2 zone based on their interface types (Layer3 or Layer2). These zones will automatically be created with the first interface additions of these types.
  • Setting /interfaces/interface/config/auto-notification to false converts port-speed to SPEED_1G and duplex-mode to Full.
  • Local-Link IPv6 addresses are not shown in Get requests.
  • PAN-OS deletes then adds entries when editing the interface host portion value, IPv6 address object if the Use Interface as Host-ID Portion check box is checked in the user interface, and comments.

VLAN Interfaces

For VLAN Interfaces:
  • PAN-OS requires static ARP entries for VLAN interfaces to specify the physical output interface. The OpenConfig model does not provide that data so the neighbor data (ARP entries) can only be retrieved.