VLAN Interface - Terraform docs

[kklimonda-cl]

panos_vlan_interface (Resource)

Schema

Required

• location (Attributes) The location of this object. (see below for nested schema)
• name (String)

Optional

• adjust_tcp_mss (Attributes) (see below for nested schema)
• arp (Attributes List) (see below for nested schema)
• bonjour (Attributes) (see below for nested schema)
• comment (String)
• ddns_config (Attributes) (see below for nested schema)
• df_ignore (Boolean)
• dhcp_client (Attributes) (see below for nested schema)
• interface_management_profile (String) Interface management profile
• ip (Attributes List) (see below for nested schema)
• ipv6 (Attributes) (see below for nested schema)
• mtu (Number) Maximum Transfer Unit, up to 9216 in Jumbo-Frame mode, up to 1500 otherwise
• ndp_proxy (Attributes) (see below for nested schema)
• netflow_profile (String) Netflow Server Profile

Nested Schema for location

Optional:

• ngfw (Attributes) Located in a specific NGFW device (see below for nested schema)
• shared (Boolean) Location in Shared Panorama
• template (Attributes) Located in a specific template (see below for nested schema)
• template_stack (Attributes) Located in a specific template stack (see below for nested schema)

Nested Schema for location.ngfw

Optional:

• ngfw_device (String) The NGFW device

Nested Schema for location.template

Optional:

• name (String) Specific Panorama template
• ngfw_device (String) The NGFW device
• panorama_device (String) Specific Panorama device

Nested Schema for location.template_stack

Optional:

• name (String) Specific Panorama template stack
• ngfw_device (String) The NGFW device
• panorama_device (String) Specific Panorama device

Nested Schema for adjust_tcp_mss

Optional:

• enable (Boolean) Set if TCP MSS value should be reduced based on mtu
• ipv4_mss_adjustment (Number) IPv4 MSS adjustment size (in bytes)
• ipv6_mss_adjustment (Number) IPv6 MSS adjustment size (in bytes)

Nested Schema for arp

Required:

• name (String)

Optional:

• hw_address (String) MAC address (format xx:xx:xx:xx:xx:xx)
• interface (String) Egress interface associated with this ARP entry

Nested Schema for bonjour

Optional:

• enable (Boolean) Set to support Bonjour service
• group_id (Number) default 0: NO-Group
• ttl_check (Boolean) Set to check and update TTL

Nested Schema for ddns_config

Optional:

• ddns_cert_profile (String)
• ddns_enabled (Boolean)
• ddns_hostname (String) ddns hostname variable or real address
• ddns_ip (List of String)
• ddns_ipv6 (List of String)
• ddns_update_interval (Number)
• ddns_vendor (String) Vendor and product type
• ddns_vendor_config (Attributes List) (see below for nested schema)

Nested Schema for ddns_config.ddns_vendor_config

Required:

• name (String)

Optional:

• value (String)

Nested Schema for dhcp_client

Optional:

• create_default_route (Boolean) Automatically create default route pointing to default gateway provided by server
• default_route_metric (Number) Metric of the default route created
• enable (Boolean)
• send_hostname (Attributes) (see below for nested schema)

Nested Schema for dhcp_client.send_hostname

Optional:

• enable (Boolean)
• hostname (String) Set Interface Hostname

Nested Schema for ip

Required:

• name (String)

Nested Schema for ipv6

Optional:

• address (Attributes List) (see below for nested schema)
• dhcp_client (Attributes) (see below for nested schema)
• enabled (Boolean) Enable IPv6 on the interface
• inherited (Attributes) (see below for nested schema)
• interface_id (String)
• neighbor_discovery (Attributes) (see below for nested schema)

Nested Schema for ipv6.address

Required:

• name (String)

Optional:

• advertise (Attributes) (see below for nested schema)
• anycast (Attributes) (see below for nested schema)
• enable_on_interface (Boolean) configure this address on interface
• prefix (Attributes) (see below for nested schema)

Nested Schema for ipv6.address.advertise

Optional:

• auto_config_flag (Boolean) Set the Auto Address Configuration Flag (A-bit) of the prefix in Router Advertisement messages
• enable (Boolean) enable advertising this prefix in router advertisements
• onlink_flag (Boolean) Set the On-Link Flag (L-bit) of the prefix in Router Advertisement messages
• preferred_lifetime (String) Preferred Lifetime (in seconds) of the prefix advertised in Router Advertisement messages
• valid_lifetime (String) Valid Lifetime (in seconds) of the prefix advertised in Router Advertisement messages

Nested Schema for ipv6.address.anycast

Nested Schema for ipv6.address.prefix

Nested Schema for ipv6.dhcp_client

Optional:

• accept_ra_route (Boolean) Accept Router Advertised Default Route
• default_route_metric (Number) Metric of the default route created
• enable (Boolean) Enable DHCPv6 Client
• neighbor_discovery (Attributes) (see below for nested schema)
• preference (String) Select Low/Medium/High
• prefix_delegation (Attributes) (see below for nested schema)
• v6_options (Attributes) (see below for nested schema)

Nested Schema for ipv6.dhcp_client.neighbor_discovery

Optional:

• dad_attempts (Number) number of consecutive neighbor solicitation messages sent for duplicate address detection
• dns_server (Attributes) (see below for nested schema)
• dns_suffix (Attributes) (see below for nested schema)
• enable_dad (Boolean) Enable Duplicate Address Detection
• enable_ndp_monitor (Boolean) Enable NDP Monitoring
• neighbor (Attributes List) (see below for nested schema)
• ns_interval (Number) interval (in seconds) between consecutive neighbor solicitation messages
• reachable_time (Number) time (in seconds) that the Reachable status for a neighbor can be maintained

Nested Schema for ipv6.dhcp_client.neighbor_discovery.dns_server

Optional:

• enable (Boolean)
• source (Attributes) (see below for nested schema)

Nested Schema for ipv6.dhcp_client.neighbor_discovery.dns_server.source

Optional:

• dhcpv6 (Attributes) (see below for nested schema)
• manual (Attributes) (see below for nested schema)

Nested Schema for ipv6.dhcp_client.neighbor_discovery.dns_server.source.dhcpv6

Nested Schema for ipv6.dhcp_client.neighbor_discovery.dns_server.source.manual

Optional:

• server (Attributes List) (see below for nested schema)

Nested Schema for ipv6.dhcp_client.neighbor_discovery.dns_server.source.manual.server

Required:

• name (String)

Optional:

• lifetime (Number) (4-3600) Lifetime in Seconds

Nested Schema for ipv6.dhcp_client.neighbor_discovery.dns_suffix

Optional:

• enable (Boolean)
• source (Attributes) (see below for nested schema)

Nested Schema for ipv6.dhcp_client.neighbor_discovery.dns_suffix.source

Optional:

• dhcpv6 (Attributes) (see below for nested schema)
• manual (Attributes) (see below for nested schema)

Nested Schema for ipv6.dhcp_client.neighbor_discovery.dns_suffix.source.dhcpv6

Nested Schema for ipv6.dhcp_client.neighbor_discovery.dns_suffix.source.manual

Optional:

• suffix (Attributes List) (see below for nested schema)

Nested Schema for ipv6.dhcp_client.neighbor_discovery.dns_suffix.source.manual.suffix

Required:

• name (String)

Optional:

• lifetime (Number) (4-3600) lifetime in seconds

Nested Schema for ipv6.dhcp_client.neighbor_discovery.neighbor

Required:

• name (String)

Optional:

• hw_address (String) MAC address (format xx:xx:xx:xx:xx:xx)

Nested Schema for ipv6.dhcp_client.prefix_delegation

Optional:

• enable (Attributes) (see below for nested schema)

Nested Schema for ipv6.dhcp_client.prefix_delegation.enable

Optional:

• no (Attributes) (see below for nested schema)
• yes (Attributes) (see below for nested schema)

Nested Schema for ipv6.dhcp_client.prefix_delegation.enable.no

Nested Schema for ipv6.dhcp_client.prefix_delegation.enable.yes

Optional:

• pfx_pool_name (String) Configure unique Prefix Pool Name
• prefix_len (Number) Hint DHCP Prefix Length (bits)
• prefix_len_hint (Boolean) Send prefix length hint to server

Nested Schema for ipv6.dhcp_client.v6_options

Optional:

• duid_type (String) Select DUID-LLT/DUID-LL
• enable (Attributes) (see below for nested schema)
• rapid_commit (Boolean) Enable Rapid Commit
• support_srvr_reconfig (Boolean) Enable DHCPv6 Server Re-Configuration Support

Nested Schema for ipv6.dhcp_client.v6_options.enable

Optional:

• no (Attributes) (see below for nested schema)
• yes (Attributes) (see below for nested schema)

Nested Schema for ipv6.dhcp_client.v6_options.enable.no

Nested Schema for ipv6.dhcp_client.v6_options.enable.yes

Optional:

• non_temp_addr (Boolean) Request Non-Temporary Address Type
• temp_addr (Boolean) Request Temporary Address Type

Nested Schema for ipv6.inherited

Optional:

• assign_addr (Attributes List) (see below for nested schema)
• enable (Boolean) Enable Inherited Interface
• neighbor_discovery (Attributes) (see below for nested schema)

Nested Schema for ipv6.inherited.assign_addr

Required:

• name (String)

Optional:

• type (Attributes) (see below for nested schema)

Nested Schema for ipv6.inherited.assign_addr.type

Optional:

• gua (Attributes) (see below for nested schema)
• ula (Attributes) (see below for nested schema)

Nested Schema for ipv6.inherited.assign_addr.type.gua

Optional:

• advertise (Attributes) (see below for nested schema)
• enable_on_interface (Boolean) Enable on Interface
• pool_type (Attributes) (see below for nested schema)
• prefix_pool (String) Prefix-Pool Name

Nested Schema for ipv6.inherited.assign_addr.type.gua.advertise

Optional:

• auto_config_flag (Boolean) Set the Auto Address Configuration Flag (A-bit) of the prefix in Router Advertisement messages
• enable (Boolean) Enable advertising this prefix in router advertisements
• onlink_flag (Boolean) Set the On-Link Flag (L-bit) of the prefix in Router Advertisement messages

Nested Schema for ipv6.inherited.assign_addr.type.gua.pool_type

Optional:

• dynamic (Attributes) (see below for nested schema)
• dynamic_id (Attributes) (see below for nested schema)

Nested Schema for ipv6.inherited.assign_addr.type.gua.pool_type.dynamic

Nested Schema for ipv6.inherited.assign_addr.type.gua.pool_type.dynamic_id

Optional:

• identifier (Number) Range [0-4095] must be unqiue for this prefix-pool

Nested Schema for ipv6.inherited.assign_addr.type.ula

Optional:

• address (String) Configure ULA (Unique Local Address)
• advertise (Attributes) (see below for nested schema)
• anycast (Boolean) Anycast Address
• enable_on_interface (Boolean) Configure this address on Interface
• prefix (Boolean) Use this as prefix to form full address with interface id/EUI-64

Nested Schema for ipv6.inherited.assign_addr.type.ula.advertise

Optional:

• auto_config_flag (Boolean) Set the Auto Address Configuration Flag (A-bit) of the prefix in Router Advertisement messages
• enable (Boolean) enable advertising this prefix in router advertisements
• onlink_flag (Boolean) Set the On-Link Flag (L-bit) of the prefix in Router Advertisement messages
• preferred_lifetime (String) Preferred Lifetime (in seconds) of the prefix advertised in Router advertisement messages
• valid_lifetime (String) Valid Lifetime (in seconds) of the prefix advertised in Router Advertisement messages

Nested Schema for ipv6.inherited.neighbor_discovery

Optional:

• dad_attempts (Number) Number of consecutive neighbor solicitation messages sent for duplicate address detection
• dns_server (Attributes) (see below for nested schema)
• dns_suffix (Attributes) (see below for nested schema)
• enable_dad (Boolean) Enable Duplicate Address Detection (DAD)
• enable_ndp_monitor (Boolean) Enable NDP Monitoring
• neighbor (Attributes List) (see below for nested schema)
• ns_interval (Number) Interval (in seconds) between consecutive neighbor solicitation messages
• reachable_time (Number) Time (in seconds) that the Reachable status for a neighbor can be maintained
• router_advertisement (Attributes) (see below for nested schema)

Nested Schema for ipv6.inherited.neighbor_discovery.dns_server

Optional:

• enable (Boolean)
• source (Attributes) (see below for nested schema)

Nested Schema for ipv6.inherited.neighbor_discovery.dns_server.source

Optional:

• dhcpv6 (Attributes) (see below for nested schema)
• manual (Attributes) (see below for nested schema)

Nested Schema for ipv6.inherited.neighbor_discovery.dns_server.source.dhcpv6

Optional:

• prefix_pool (String) Prefix-Pool Name

Nested Schema for ipv6.inherited.neighbor_discovery.dns_server.source.manual

Optional:

• server (Attributes List) (see below for nested schema)

Nested Schema for ipv6.inherited.neighbor_discovery.dns_server.source.manual.server

Required:

• name (String)

Optional:

• lifetime (Number) (4-3600) Lifetime in Seconds

Nested Schema for ipv6.inherited.neighbor_discovery.dns_suffix

Optional:

• enable (Boolean)
• source (Attributes) (see below for nested schema)

Nested Schema for ipv6.inherited.neighbor_discovery.dns_suffix.source

Optional:

• dhcpv6 (Attributes) (see below for nested schema)
• manual (Attributes) (see below for nested schema)

Nested Schema for ipv6.inherited.neighbor_discovery.dns_suffix.source.dhcpv6

Optional:

• prefix_pool (String) Prefix-Pool Name

Nested Schema for ipv6.inherited.neighbor_discovery.dns_suffix.source.manual

Optional:

• suffix (Attributes List) (see below for nested schema)

Nested Schema for ipv6.inherited.neighbor_discovery.dns_suffix.source.manual.suffix

Required:

• name (String)

Optional:

• lifetime (Number) (4-3600) lifetime in seconds

Nested Schema for ipv6.inherited.neighbor_discovery.neighbor

Required:

• name (String)

Optional:

• hw_address (String) MAC address (format xx:xx:xx:xx:xx:xx)

Nested Schema for ipv6.inherited.neighbor_discovery.router_advertisement

Optional:

• enable (Boolean)
• enable_consistency_check (Boolean) check consistency of RA messages from other routers.
• hop_limit (String) Current Hop Limit advertised in Router Advertisement messages
• lifetime (Number) Router Lifetime (in seconds) advertised in Router Advertisement messages
• link_mtu (String) value of MTU option in Router Advertisement messages, upto 9216 in Jumbo-Frame mode, up to 1500 otherwise
• managed_flag (Boolean) Set the Managed Configuration Flag (M-bit) in Router Advertisement messages
• max_interval (Number) Maximum interval (seconds) between consecutive unsolicited Router Advertisement messages
• min_interval (Number) Minimum interval (seconds) between consecutive unsolicited Router Advertisement messages
• other_flag (Boolean) Set the Other Stateful Configuration Flag (O-bit) in Router Advertisement messages
• reachable_time (String) Reachable Time (in milliseconds) advertised in Router Advertisement messages
• retransmission_timer (String) Retransmission Timer (in milliseconds) advertised in Router Advertisement messages
• router_preference (String)

Nested Schema for ipv6.neighbor_discovery

Optional:

• dad_attempts (Number) number of consecutive neighbor solicitation messages sent for duplicate address detection
• enable_dad (Boolean) enable duplicate address detection
• enable_ndp_monitor (Boolean) enable ndp monitoring
• neighbor (Attributes List) (see below for nested schema)
• ns_interval (Number) interval (in seconds) between consecutive neighbor solicitation messages
• reachable_time (Number) time (in seconds) that the Reachable status for a neighbor can be maintained
• router_advertisement (Attributes) (see below for nested schema)

Nested Schema for ipv6.neighbor_discovery.neighbor

Required:

• name (String)

Optional:

• hw_address (String) MAC address (format xx:xx:xx:xx:xx:xx)

Nested Schema for ipv6.neighbor_discovery.router_advertisement

Optional:

• dns_support (Attributes) (see below for nested schema)
• enable (Boolean)
• enable_consistency_check (Boolean) check consistency of RA messages from other routers.
• hop_limit (String) Current Hop Limit advertised in Router Advertisement messages
• lifetime (Number) Router Lifetime (in seconds) advertised in Router Advertisement messages
• link_mtu (String) value of MTU option in Router Advertisement messages, upto 9216 in Jumbo-Frame mode, up to 1500 otherwise
• managed_flag (Boolean) Set the Managed Configuration Flag (M-bit) in Router Advertisement messages
• max_interval (Number) Maximum interval (seconds) between consecutive unsolicited Router Advertisement messages
• min_interval (Number) Minimum interval (seconds) between consecutive unsolicited Router Advertisement messages
• other_flag (Boolean) Set the Other Stateful Configuration Flag (O-bit) in Router Advertisement messages
• reachable_time (String) Reachable Time (in milliseconds) advertised in Router Advertisement messages
• retransmission_timer (String) Retransmission Timer (in milliseconds) advertised in Router Advertisement messages
• router_preference (String)

Nested Schema for ipv6.neighbor_discovery.router_advertisement.dns_support

Optional:

• enable (Boolean)
• server (Attributes List) (see below for nested schema)
• suffix (Attributes List) (see below for nested schema)

Nested Schema for ipv6.neighbor_discovery.router_advertisement.dns_support.server

Required:

• name (String)

Optional:

• lifetime (Number) (4-3600) lifetime in seconds

Nested Schema for ipv6.neighbor_discovery.router_advertisement.dns_support.suffix

Required:

• name (String)

Optional:

• lifetime (Number) (4-3600) lifetime in seconds

Nested Schema for ndp_proxy

Optional:

• address (Attributes List) (see below for nested schema)
• enabled (Boolean) Enable proxy NDP on the interface

Nested Schema for ndp_proxy.address

Required:

• name (String)

Optional:

• negate (Boolean) put the prefix or address on a block list